Repository navigation
PHP 8.4.27
·
7822 commits
to master
since this release
php-8.4.27
NattyNarwhal
Calvin Buckley
This tag was signed with the committer’s verified signature.
NattyNarwhal
Calvin Buckley
00d8bae
This commit was signed with the committer’s verified signature.
NattyNarwhal
Calvin Buckley
The PHP development team announces the immediate availability of PHP 8.4.27. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.4 users are strongly encouraged to update immediately.
There are no complete mitigations, updating is the only safe choice. See the security advisory for details.
For source downloads of PHP 8.4.27 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.