# PHP

Latest release: 8.5.12. Known vulnerabilities: 101. Actively exploited: 2. Vendor advisories: [https://github.com/php/php-src/security/advisories](https://github.com/php/php-src/security/advisories)

Check any version: https://fixedin.dev/php/{version}.md (for example https://fixedin.dev/php/8.5.12.md).

## Release lines

| Line | Latest | Status | Check |
|---|---|---|---|
| 8.5 | 8.5.12 | supported until 2029-12-31 | https://fixedin.dev/php/8.5.12.md |
| 8.4 | 8.4.27 | supported until 2028-12-31 | https://fixedin.dev/php/8.4.27.md |
| 8.3 | 8.3.36 | supported until 2027-12-31 | https://fixedin.dev/php/8.3.36.md |
| 8.2 | 8.2.35 | supported until 2026-12-31 | https://fixedin.dev/php/8.2.35.md |
| 8.1 | 8.1.34 | end of life since 2025-12-31 | https://fixedin.dev/php/8.1.34.md |
| 8.0 | 8.0.30 | end of life since 2023-11-26 | https://fixedin.dev/php/8.0.30.md |
| 7.4 | 7.4.33 | end of life since 2022-11-28 | https://fixedin.dev/php/7.4.33.md |
| 7.3 | 7.3.33 | end of life since 2021-12-06 | https://fixedin.dev/php/7.3.33.md |
| 7.2 | 7.2.34 | end of life since 2020-11-30 | https://fixedin.dev/php/7.2.34.md |
| 7.1 | 7.1.33 | end of life since 2019-12-01 | https://fixedin.dev/php/7.1.33.md |
| 7.0 | 7.0.33 | end of life since 2019-01-10 | https://fixedin.dev/php/7.0.33.md |
| 5.6 | 5.6.40 | end of life since 2018-12-31 | https://fixedin.dev/php/5.6.40.md |
| 5.5 | 5.5.38 | end of life since 2016-07-21 | https://fixedin.dev/php/5.5.38.md |
| 5.4 | 5.4.45 | end of life since 2015-09-14 | https://fixedin.dev/php/5.4.45.md |
| 5.3 | 5.3.29 | end of life since 2014-08-14 | https://fixedin.dev/php/5.3.29.md |
| 5.2 | 5.2.17 | end of life since 2011-01-06 | https://fixedin.dev/php/5.2.17.md |
| 5.1 | 5.1.6 | end of life since 2006-08-24 | https://fixedin.dev/php/5.1.6.md |
| 5.0 | 5.0.5 | end of life since 2005-09-05 | https://fixedin.dev/php/5.0.5.md |

## Actively exploited

- [CVE-2024-4577](https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv), added to CISA KEV 2024-06-12
- [CVE-2019-11043](https://usn.ubuntu.com/4166-1/), added to CISA KEV 2022-03-25

Data as of: 2026-10-24 21:52 UTC

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/php · JSON: https://fixedin.dev/php.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt