Skip to content

v8.15.2

Choose a tag to compare

@gocardless-ci-robot gocardless-ci-robot released this 23 Oct 10:26
· 20 commits to master since this release
f7340ff

Fixes

Recommend upgrading PHP to fix critical vulnerabilities

The README now recommends always using the latest patch release of a supported PHP version.

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution: CVE-2026-109618 and CVE-2026-109619. These vulnerabilities are in PHP itself, not in this library. If you are running an earlier version of PHP, please upgrade as soon as possible. See the PHP security advisory for more details.