· Security Notices
Weekly security digest: 22 October 2026
Security advisories, releases and end-of-life dates for WordPress, Ruby, Rails, SilverStripe, PHP and databases from 15 October 2026 to 22 October 2026.
PHP vulnerabilities
RCE via stale global state
- Affects: < 8.2.35; < 8.3.36; < 8.4.27; < 8.5.12
- Fixed in: 8.2.35, 8.3.36, 8.4.27, 8.5.12
- Severity: Critical
- CVE: CVE-2026-109619
- Read the advisory
RCE via OOM corruption
- Affects: < 8.2.35; < 8.3.36; < 8.4.27; < 8.5.12
- Fixed in: 8.2.35, 8.3.36, 8.4.27, 8.5.12
- Severity: Critical
- CVE: CVE-2026-109618
- Read the advisory
Releases
- Ruby: Ruby 4.0.8 Released (22 October 2026)
- PHP: PHP 8.5.12 released! (21 October 2026)
- PHP: PHP 8.4.27 released! (21 October 2026)
- PHP: PHP 8.3.36 released! (21 October 2026)
- PHP: PHP 8.2.35 released! (21 October 2026)