{"product":"ai-run-cloud","schema":1,"issued_at":1794494029,"minimum_safe_php_versions":{"8.5":"8.5.12","8.4":"8.4.27","8.3":"8.3.36","8.2":"8.2.35"},"eol_php_versions":["8.1","8.0","7.4","7.3","7.2","7.1","7.0","5.6"],"eol_php_dates":{"8.2":"2026-12-31"},"advisories":[{"id":"CVE-2026-109618","ghsa_id":"GHSA-w8hw-w9fx-j79w","package":"php-runtime","affected_range":">= 8.5.0, < 8.5.12 || >= 8.4.0, < 8.4.27 || >= 8.3.0, < 8.3.36 || >= 8.2.0, < 8.2.35 || < 8.2.0","fixed_versions":{"8.5":"8.5.12","8.4":"8.4.27","8.3":"8.3.36","8.2":"8.2.35"},"fixed_version":"8.5.12 / 8.4.27 / 8.3.36 / 8.2.35","cvss_v4_score":9.2,"severity":"CRITICAL","published_at":"2026-10-21","title":"Unauthenticated Remote Code Execution via Out-of-Memory Corruption in PHP Runtime","description":"Out-of-memory corruption in PHP web SAPI handlers (PHP-FPM, Apache mod_php, php-cgi, FrankenPHP, LiteSpeed) allows unauthenticated remote code execution (CVSS v4.0 9.2 Critical).","ecosystem":"php","important":true,"auto_update":true},{"id":"CVE-2026-109619","ghsa_id":"GHSA-6wmf-4rv5-p3rp","package":"php-runtime","affected_range":">= 8.5.0, < 8.5.12 || >= 8.4.0, < 8.4.27 || >= 8.3.0, < 8.3.36 || >= 8.2.0, < 8.2.35 || < 8.2.0","fixed_versions":{"8.5":"8.5.12","8.4":"8.4.27","8.3":"8.3.36","8.2":"8.2.35"},"fixed_version":"8.5.12 / 8.4.27 / 8.3.36 / 8.2.35","cvss_v4_score":9.2,"severity":"CRITICAL","published_at":"2026-10-21","title":"Unauthenticated Remote Code Execution via Stale Global State in PHP Runtime","description":"Stale global state across consecutive requests in persistent PHP workers (PHP-FPM, Apache mod_php, FrankenPHP, LiteSpeed) allows unauthenticated remote code execution (CVSS v4.0 9.2 Critical).","ecosystem":"php","important":true,"auto_update":true},{"id":"CVE-2021-3603","package":"phpmailer/phpmailer","affected_range":"< 6.5.0","fixed_version":"6.5.0","severity":"CRITICAL","title":"Remote Code Execution in PHPMailer","description":"PHPMailer versions prior to 6.5.0 are vulnerable to command injection via untrusted email addresses or sender parameters.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2022-31090","package":"guzzlehttp/guzzle","affected_range":"< 7.4.5","fixed_version":"7.4.5","severity":"HIGH","title":"Cross-domain Authorization Header Leak in Guzzle","description":"Guzzle versions prior to 7.4.5 allow sensitive authorization headers and cookies to leak to different domains during redirects.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2023-28115","package":"laravel/framework","affected_range":">= 8.0.0, < 8.83.27","fixed_version":"8.83.27","severity":"MEDIUM","title":"Cross-Site Scripting (XSS) via Blade Directives","description":"Certain Blade template compiler directives do not properly sanitize untrusted input before rendering.","ecosystem":"composer","important":false,"auto_update":false},{"id":"CVE-2022-24894","package":"symfony/http-foundation","affected_range":">= 5.0.0, < 5.4.20","fixed_version":"5.4.20","severity":"HIGH","title":"HTTP Response Splitting and Header Poisoning in Symfony","description":"Crafted header values can cause HTTP response splitting and cache poisoning in reverse proxies.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2021-26120","package":"phpunit/phpunit","affected_range":"< 9.5.20","fixed_version":"9.5.20","severity":"CRITICAL","title":"Arbitrary Code Execution via Eval in PHPUnit","description":"PHPUnit versions prior to 9.5.20 allow arbitrary code execution when running untrusted test suites or via stdin injection.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2022-31159","package":"aws/aws-sdk-php","affected_range":"< 3.209.31","fixed_version":"3.209.31","severity":"HIGH","title":"SSRF & Credential Exfiltration in AWS SDK for PHP","description":"IMDSv2 token parsing flaws permit SSRF exploitation to retrieve EC2 instance metadata.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2022-23614","package":"twig/twig","affected_range":"< 3.3.8","fixed_version":"3.3.8","severity":"CRITICAL","title":"Template Sandbox Bypass in Twig","description":"Twig prior to 3.3.8 does not enforce closure security in sort filters, allowing complete sandbox escape and RCE.","ecosystem":"composer","important":true,"auto_update":false},{"id":"CVE-2022-1329","plugin":"elementor","affected_range":"< 3.6.3","fixed_version":"3.6.3","severity":"CRITICAL","title":"Authenticated Remote Code Execution in Elementor","description":"Elementor prior to 3.6.3 allows any authenticated user (including subscriber) to execute arbitrary PHP code via ajax onboard handler.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2020-35489","plugin":"contact-form-7","affected_range":"< 5.3.2","fixed_version":"5.3.2","severity":"CRITICAL","title":"Unrestricted File Upload in Contact Form 7","description":"Contact Form 7 versions prior to 5.3.2 allow bypassing filename extension restrictions to upload PHP shell scripts.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2021-32693","plugin":"woocommerce","affected_range":"< 5.5.1","fixed_version":"5.5.1","severity":"CRITICAL","title":"Blind SQL Injection in WooCommerce","description":"Flaws in customer account and billing address lookups allow blind SQL injection and data exfiltration.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2020-25213","plugin":"wp-file-manager","affected_range":"< 6.9","fixed_version":"6.9","severity":"CRITICAL","title":"Unauthenticated Arbitrary File Upload in WP File Manager","description":"ElFinder library included in WP File Manager allows unauthenticated visitors to upload arbitrary executable scripts.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2021-25036","plugin":"all-in-one-seo-pack","affected_range":"< 4.1.5.3","fixed_version":"4.1.5.3","severity":"HIGH","title":"SQL Injection & Privilege Escalation in All in One SEO","description":"Improper input validation in REST API endpoints enables SQL injection leading to administrator takeover.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2021-34644","plugin":"wordfence","affected_range":"< 7.5.3","fixed_version":"7.5.3","severity":"HIGH","title":"2FA Bypass in Wordfence Security","description":"Flaws in two-factor authorization token validation allow bypassing MFA protection.","ecosystem":"wordpress","important":true,"auto_update":false},{"id":"CVE-2022-0320","plugin":"essential-addons-for-elementor-lite","affected_range":"< 5.0.5","fixed_version":"5.0.5","severity":"MEDIUM","title":"Local File Inclusion in Essential Addons for Elementor","description":"LFI vulnerability permits reading sensitive server files or executing malicious scripts.","ecosystem":"wordpress","important":false,"auto_update":false}]}