PHP 8.1.2 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 8.1.34
Nearest fix in your release line. Recommended: 8.2.35, the lowest fixed release that is still supported.
- Known vulnerabilities
- 41 (6 critical, 12 high)
- End of life
- Yes, since 2025-12-31
- Data as of
- 2026-10-24 15:37 UTC
Vulnerabilities
- CVE-2024-4577 critical exploited fixed in 8.1.29
- CVE-2024-8932 critical fixed in 8.1.31
- CVE-2024-11236 critical fixed in 8.1.31
- CVE-2024-1874 critical fixed in 8.1.28
- CVE-2023-3824 critical fixed in 8.1.22
- CVE-2022-31631 critical fixed in 8.1.15
- CVE-2023-3823 high fixed in 8.1.22
- CVE-2025-14180 high fixed in 8.1.34
- CVE-2021-21708 high fixed in 8.1.3
- CVE-2024-8926 high fixed in 8.1.30
And 31 more with lower severity.
- 6 PHP vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.