php-legacy
| Link | package | bugs open | bugs closed | Wiki | GitHub | web search |
| Description | A general-purpose scripting language that is especially suited to web development |
| Version | 8.3.36-4 [extra] |
Resolved
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-2910 | 8.1.13-1 | 8.3.36-1 | Critical | Fixed |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2026-109619 | AVG-2910 | Critical | Yes | Arbitrary code execution | PHP contains various global state, such as error, session, object and extension state that is retained by a worker but points to memory owned by one... |
| CVE-2026-109618 | AVG-2910 | Critical | Yes | Arbitrary code execution | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is... |
Advisories
| Date | Advisory | Group | Severity | Type |
|---|---|---|---|---|
| 21 Oct 2026 | ASA-202610-2 | AVG-2910 | Critical | arbitrary code execution |