Repository navigation
PHP CVE #655
Description
@f3l1x https://www.php.net/archive/2026.php#2026-10-21-5 is there something to patch in this amazing project? I think if so, its very urgent!
Expected Patch Version: PHP 8.5.12
Current Version (AFAIK): 8.5.2 (this is returned in the response header, something i would remove anyhow in the future)
Activity
anxiouspenguin commentedon Oct 21, 2026
@nadar @f3l1x wondering the same thing! let me know if there's a donation link to get this patched!
f3l1x commentedon Oct 21, 2026
Hi folks, going to update PHP libs, give me few hours.
f3l1x commentedon Oct 21, 2026
Anything is welcome https://github.com/sponsors/f3l1x/ ;-)
f3l1x commentedon Oct 21, 2026
PHP 8.5.12 is live https://example-php-8-5.vercel.app/, let's redeploy your apps.
Ref: contributte/libphp@dfc2c68
Other versions also coming, but it takes a little bit longer, I have to wait for patches in RHEL etc.
anxiouspenguin commentedon Oct 21, 2026
@f3l1x this is my first experience with Vercel and PHP... what do i need to do to fix? do i just update my vercel.json? appreciate your help!
f3l1x commentedon Oct 21, 2026
I've fixed PHP lib what vercel-php uses. So just call
vc --prod --forceand it will download new deps.nadar commentedon Oct 22, 2026
amazing, thanks!
f3l1x commentedon Oct 23, 2026
Also fixed for PHP 8.4.
https://example-php-8-4.vercel.app/