Repository navigation
v1.7.1
Security: PHP session.upload_progress is turned off in the runtime image. The server never uses it; this removes the entry point of the PHP session upload-progress use-after-free (CVE-2026-109618 / CVE-2026-109619, PHP security release 2026-10-21 14:00 UTC). A follow-up release moves the image to the patched PHP once it is published.