The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php8.4-develUpgrade php-snmpUpgrade php-commonUpgrade phpUpgrade php-intlUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php8.4-opcacheUpgrade php8.4-mbstringUpgrade apcu-panelUpgrade php-dbaUpgrade libzip-develUpgrade php8.4-gmpUpgrade php8.4-mysqlndUpgrade php8.4-pdoUpgrade php-cliUpgrade php-processUpgrade php8.4-enchantUpgrade php8.4-embeddedUpgrade php-odbcUpgrade php8.4-pgsqlUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php8.4Upgrade php-embeddedUpgrade php-ffiUpgrade php8.4-processUpgrade php-dbgUpgrade php8.4-cliUpgrade php8.4-bcmathUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-xmlUpgrade php-enchantUpgrade php-develUpgrade php8.4-gdUpgrade php-pdoUpgrade php-pearUpgrade php-pecl-zipUpgrade php8.4-snmpUpgrade php-pecl-redis6Upgrade php-pecl-xdebug3Upgrade php-pecl-xdebugUpgrade php8.4-soapUpgrade php-pgsqlUpgrade libzipUpgrade php8.4-commonUpgrade php8.4-xmlUpgrade php8.4-ldapUpgrade php-mbstringUpgrade php8.4-fpmUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php8.4-dbgUpgrade php-gdUpgrade php-fpmUpgrade php-bcmathUpgrade php8.4-odbcUpgrade php-ldapUpgrade php-soapUpgrade php-jsonUpgrade php8.4-dbaUpgrade php8.4-intlUpgrade php8.4-ffi | Jun 1, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade php81Upgrade php85Upgrade php82Upgrade php84Upgrade php83 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-soapUpgrade php-sodiumUpgrade php-dbgUpgrade php-commonUpgrade phpUpgrade php-bcmathUpgrade php-odbcUpgrade php-dbaUpgrade php-pgsqlUpgrade php-ldapUpgrade php-intlUpgrade php-mysqlndUpgrade php-pdoUpgrade php-snmpUpgrade php-debuginfoUpgrade php-xmlUpgrade php-processUpgrade php-enchantUpgrade php-embeddedUpgrade php-develUpgrade php-gmpUpgrade php-cliUpgrade php-gdUpgrade php-opcacheUpgrade php-mbstringUpgrade php-fpmUpgrade php-pspell | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.2-ffi-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.5-intlUpgrade php8.2-processUpgrade php8.3-bcmathUpgrade php8.3-ffiUpgrade php8.4-debuginfoUpgrade php8.4-ldapUpgrade php8.4-odbcUpgrade php8.5-commonUpgrade php8.5-snmp-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.5-process-debuginfoUpgrade php8.5-ffi-debuginfoUpgrade php8.5-gmp-debuginfoUpgrade php8.2-debugsourceUpgrade php8.5-xmlUpgrade php8.2-intlUpgrade php8.3-snmp-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.5-cli-debuginfoUpgrade php8.3-pdoUpgrade php8.4-gdUpgrade php8.2-cliUpgrade php8.4-intlUpgrade php8.3-cliUpgrade php8.4-processUpgrade php8.5-bcmathUpgrade php8.2-sodiumUpgrade php8.5-modphpUpgrade php8.2-commonUpgrade php8.5-gdUpgrade php8.2-odbcUpgrade php8.5-debuginfoUpgrade php8.5-enchantUpgrade php8.5-ffiUpgrade php8.2-odbc-debuginfoUpgrade php8.2-ldapUpgrade php8.4-bcmathUpgrade php8.3-embedded-debuginfoUpgrade php8.3-gdUpgrade php8.2-opcache-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.4-xmlUpgrade php8.5Upgrade php8.5-pdoUpgrade php8.5-pdo-debuginfoUpgrade php8.5-gmpUpgrade php8.2-ffiUpgrade php8.3-enchantUpgrade php8.3-soap-debuginfoUpgrade php8.4-debugsourceUpgrade php8.2-pspell-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.3-soapUpgrade php8.2-dbaUpgrade php8.4-snmpUpgrade php8.5-dbaUpgrade php8.5-cliUpgrade php8.5-common-debuginfoUpgrade php8.4-ffiUpgrade php8.3-pgsqlUpgrade php8.3-pspellUpgrade php8.3-xmlUpgrade php8.3-process-debuginfoUpgrade php8.5-intl-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-pspellUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.3-opcacheUpgrade php8.3-dba-debuginfoUpgrade php8.3-ldapUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-dbgUpgrade php8.3-cli-debuginfoUpgrade php8.3-tidyUpgrade php8.5-debugsourceUpgrade php8.5-zipUpgrade php8.3-develUpgrade php8.4-fpm-debuginfoUpgrade php8.2Upgrade php8.4-commonUpgrade php8.5-modphp-debuginfoUpgrade php8.2-bcmathUpgrade php8.4-modphp-debuginfoUpgrade php8.4-dbaUpgrade php8.2-gdUpgrade php8.3Upgrade php8.5-processUpgrade php8.3-sodium-debuginfoUpgrade php8.2-snmpUpgrade php8.3-bcmath-debuginfoUpgrade php8.4-dbgUpgrade php8.4-bcmath-debuginfoUpgrade php8.3-odbcUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.2-mysqlndUpgrade php8.5-mbstringUpgrade php8.2-pdoUpgrade php8.3-common-debuginfoUpgrade php8.2-pdo-debuginfoUpgrade php8.4-zipUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-zipUpgrade php8.4-cliUpgrade php8.5-fpm-debuginfoUpgrade php8.2-sodium-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-mbstringUpgrade php8.3-debugsourceUpgrade php8.2-soap-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.5-enchant-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.5-dba-debuginfoUpgrade php8.3-embeddedUpgrade php8.2-soapUpgrade php8.3-ldap-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.4-zip-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-develUpgrade php8.3-fpm-debuginfoUpgrade php8.5-xml-debuginfoUpgrade php8.3-gmp-debuginfoUpgrade php8.4-mysqlndUpgrade php8.5-zip-debuginfoUpgrade php8.5-embeddedUpgrade php8.5-ldap-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.5-mysqlndUpgrade php8.5-gd-debuginfoUpgrade php8.4-sodium-debuginfoUpgrade php8.3-processUpgrade php8.3-gmpUpgrade php8.3-ffi-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-gmp-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.5-snmpUpgrade php8.4-odbc-debuginfoUpgrade php8.4-pdoUpgrade php8.4-mbstringUpgrade php8.3-dbg-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-enchantUpgrade php8.2-dbgUpgrade php8.2-bcmath-debuginfoUpgrade php8.5-soap-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.3-modphp-debuginfoUpgrade php8.2-fpmUpgrade php8.5-tidyUpgrade php8.5-pgsqlUpgrade php8.2-xml-debuginfoUpgrade php8.2-tidyUpgrade php8.2-process-debuginfoUpgrade php8.2-mbstringUpgrade php8.5-ldapUpgrade php8.4-process-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.3-zipUpgrade php8.3-tidy-debuginfoUpgrade php8.5-dbgUpgrade php8.4-embeddedUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.5-sodiumUpgrade php8.5-sodium-debuginfoUpgrade php8.3-mysqlndUpgrade php8.5-fpmUpgrade php8.3-pdo-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.3-intl-debuginfoUpgrade php8.2-xmlUpgrade php8.2-tidy-debuginfoUpgrade php8.2-develUpgrade php8.2-cli-debuginfoUpgrade php8.5-bcmath-debuginfoUpgrade php8.4-tidy-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-modphpUpgrade php8.4-gmpUpgrade php8.4-enchantUpgrade php8.4-dbg-debuginfoUpgrade php8.3-sodiumUpgrade php8.3-modphpUpgrade php8.5-odbc-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-sodiumUpgrade php8.3-intlUpgrade php8.5-tidy-debuginfoUpgrade php8.5-soapUpgrade php8.4Upgrade php8.5-mbstring-debuginfoUpgrade php8.5-develUpgrade php8.5-dbg-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-fpmUpgrade php8.3-snmpUpgrade php8.4-opcacheUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.3-fpmUpgrade php8.3-dbaUpgrade php8.3-commonUpgrade php8.2-embeddedUpgrade php8.4-soapUpgrade php8.5-embedded-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.5-pgsql-debuginfoUpgrade php8.2-gmpUpgrade php8.3-gd-debuginfoUpgrade php8.5-odbcUpgrade php8.4-ffi-debuginfoUpgrade php8.4-tidyUpgrade php8.2-debuginfoUpgrade php8.3-debuginfo | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php8.2Upgrade php8.4Upgrade php7.4 | May 10, 2026 | May 10, 2026 |
| Oracle_linux | — | Upgrade php8.4-gmpUpgrade php8.4-dbgUpgrade php-soapUpgrade php8.4-opcacheUpgrade php8.4-develUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-ffiUpgrade php8.4-mysqlndUpgrade libzip-toolsUpgrade libzip-develUpgrade php-processUpgrade php8.4-bcmathUpgrade php-dbaUpgrade php-snmpUpgrade php8.4Upgrade php8.4-enchantUpgrade php8.4-processUpgrade php8.4-pdoUpgrade php8.4-commonUpgrade php8.4-snmpUpgrade php8.4-pgsqlUpgrade php8.4-dbaUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-xmlUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-jsonUpgrade phpUpgrade php8.4-ffiUpgrade php8.4-gdUpgrade php8.4-xmlUpgrade php-cliUpgrade php-enchantUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php8.4-embeddedUpgrade php8.4-cliUpgrade php-gmpUpgrade php-odbcUpgrade php-commonUpgrade php-pgsqlUpgrade php8.4-intlUpgrade php-opcacheUpgrade php8.4-ldapUpgrade php8.4-odbcUpgrade php-pecl-zipUpgrade php-pecl-xdebug3Upgrade php-pecl-redis6Upgrade php-intlUpgrade php-fpmUpgrade php8.4-soapUpgrade php8.4-fpmUpgrade libzipUpgrade php8.4-mbstringUpgrade php-ldapUpgrade php-embeddedUpgrade php-develUpgrade php-pearUpgrade php-bcmathUpgrade apcu-panelUpgrade php-pdoUpgrade php-pecl-apcu-devel | Jun 4, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade php-opcacheUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php8.4-debuginfoUpgrade php8.4-xmlUpgrade php-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php8.4-dbaUpgrade php-dbg-debuginfoUpgrade php8.4-gdUpgrade php8.4-snmpUpgrade php-debugsourceUpgrade php-develUpgrade php8.4-dba-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php8.4-gd-debuginfoUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade php-snmpUpgrade php-xmlrpcUpgrade php8.4-cliUpgrade php8.4-mysqlndUpgrade php8.4-soapNo solution existsUpgrade php-pecl-zip-debugsourceUpgrade php8.4-bcmathUpgrade php8.4-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlndUpgrade php8.4-processUpgrade php8.4-commonUpgrade php-pecl-xdebug3-debuginfoUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php-mbstringUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php-pecl-xdebugUpgrade php8.4-enchantUpgrade php-pearUpgrade php8.4-ffiUpgrade php8.4-dbgUpgrade php-enchantUpgrade php-bcmathUpgrade php8.4-ffi-debuginfoUpgrade php-pecl-redis6Upgrade php-pecl-rrd-debuginfoUpgrade php8.4-ldapUpgrade php8.4-gmpUpgrade libzip-develUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php8.4-opcacheUpgrade php-ffiUpgrade php8.4-mbstringUpgrade php-dbgUpgrade php8.4-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-develUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-processUpgrade php-pecl-zip-debuginfoUpgrade php8.4-embeddedUpgrade php-gmpUpgrade php8.4-intlUpgrade libzip-tools-debuginfoUpgrade apcu-panelUpgrade php-pecl-redis6-debugsourceUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-pgsql-debuginfoUpgrade php8.4-process-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php8.4-ldap-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php-fpm-debuginfoUpgrade php8.4-fpmUpgrade php8.4-cli-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php8.4-pdoUpgrade php8.4-odbcUpgrade php8.4-debugsourceUpgrade php8.4-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-gdUpgrade php-ffi-debuginfoUpgrade php-cli-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade phpUpgrade php-intlUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.4Upgrade php-pdoUpgrade php8.4-xml-debuginfoUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ldap-debuginfoUpgrade php-ldapUpgrade libzip-debugsourceUpgrade php-dba | Jun 3, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php8.4-ldapUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php8.4-soapUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbgUpgrade php8.4-fpmUpgrade php-enchant-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php8.4-bcmath-debuginfoUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debugsourceUpgrade php8.4-intlUpgrade php8.4-gdUpgrade php8.4-gd-debuginfoUpgrade php8.4-odbcUpgrade php8.4-xmlUpgrade php-bcmathUpgrade php-pecl-xdebug3-debuginfoUpgrade php-odbc-debuginfoUpgrade php8.4-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-debugsourceUpgrade phpUpgrade php8.4-debugsourceUpgrade php8.4-intl-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzipUpgrade php-commonUpgrade php-common-debuginfoUpgrade php8.4-debuginfoUpgrade php8.4-embeddedUpgrade php-cliUpgrade php8.4-common-debuginfoUpgrade php-develUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php8.4-mbstringUpgrade php-fpm-debuginfoUpgrade php-ldapUpgrade php-enchantUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php8.4-odbc-debuginfoUpgrade php-intlUpgrade php-mysqlndUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-json-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ffi-debuginfoUpgrade php8.4-ffiUpgrade php-processUpgrade php8.4-dbgUpgrade php-pdo-debuginfoUpgrade php8.4-dbaUpgrade php8.4-opcacheUpgrade php8.4-ldap-debuginfoUpgrade php8.4-enchantUpgrade php8.4-enchant-debuginfoUpgrade php8.4Upgrade php8.4-fpm-debuginfoUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php8.4-snmp-debuginfoUpgrade php8.4-snmpUpgrade php8.4-embedded-debuginfoUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-gdUpgrade php8.4-dba-debuginfoUpgrade php-mbstringUpgrade php8.4-processUpgrade php-mysqlnd-debuginfoUpgrade php8.4-develUpgrade php-snmp-debuginfoUpgrade php8.4-process-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-mysqlndUpgrade php8.4-mbstring-debuginfoUpgrade php-debuginfoUpgrade php8.4-bcmathUpgrade php8.4-gmp-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-pdo-debuginfoUpgrade php8.4-pdoUpgrade php8.4-gmpUpgrade php8.4-commonUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade php8.4-ffi-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-redis6-debuginfo | Jun 2, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade php8.1Upgrade php8.3Upgrade php8.5Upgrade php8.4 | May 28, 2026 | May 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub