Skip to content

v1.7.1

Choose a tag to compare

@TheJakeBraun TheJakeBraun released this 21 Oct 03:03
· 3 commits to main since this release
01f69c1

Security: PHP session.upload_progress is turned off in the runtime image. The server never uses it; this removes the entry point of the PHP session upload-progress use-after-free (CVE-2026-109618 / CVE-2026-109619, PHP security release 2026-10-21 14:00 UTC). A follow-up release moves the image to the patched PHP once it is published.