PHP

Everything Patch Observer has reported about PHP: 2 stories, newest first. Part of our Vulnerabilities coverage.

Symfony Expression Language flaw crashes PHP processes in unpatched versions

A high-severity parsing flaw in Symfony allows attackers to crash PHP processes via deep nesting. Patches are available for all affected major version lines.

Oct 15, 2026

Vulnerabilities

High-Severity DoS in PHP Commonmark Library Risks Server CPU Exhaustion

Unauthenticated attackers can exploit CVE-2026-105830 to freeze PHP workers via malicious markdown input, requiring immediate patching.

Oct 8, 2026