Top Tweets for #php

🚨 Another week, another critical vulnerability addressed in PHP. CVE-2026-111497 (Brotli) scores 9.2 CVSS. PHP released updated Windows builds today (Oct-26) to address the vulnerability in its bundled Brotli library. Linux installations may also be exposed through vulnerable system Brotli dependencies, which require separate updates. https://t.co/IbxsXBvhI7 #php #cybersecurity

‼️ PHP Releases New Windows Build Security Updates to Fix Critical HTTP2Shell Vulnerability Details: https://t.co/sbjvQZhyNA The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1, and PHP announced them on October 26, 2026. Each build now includes Brotli 1.2.1, which fixes CVE-2026-111497. Windows users who run PHP should install these packages without delay. The flaw sits in Google’s Brotli library, a compression tool that many programs use to unpack data. It is an out-of-bounds write, which means the code writes data past the memory area it was meant to use. PHP’s own advisory explains how the flaw reaches PHP on Windows. The vulnerable decoder can be reached through the cURL extension when automatic HTTP response decompression is turned on. #CybersecurityNews