ZendPHP August 2026 Releases
Security Changes
ZendPHP 8.1.34.3
- GD
- Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
- PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
E'...'backslash breakout). (CVE-2026-17543) (ilutov)
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
- Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260) (Jakub Zelenka)
ZendPHP 7.4.33.15
- GD
- Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
- PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
E'...'backslash breakout). (CVE-2026-17543) (ilutov)
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
- Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260) (Jakub Zelenka)
ZendPHP 7.3.33.21
- GD
- Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
- PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
E'...'backslash breakout). (CVE-2026-17543) (ilutov)
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
- Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260) (Jakub Zelenka)
ZendPHP 7.2.34.29
- GD
- Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
- PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
E'...'backslash breakout). (CVE-2026-17543) (ilutov)
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
- Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260) (Jakub Zelenka)