Please update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35

PHP just released versions fixing critical security vulnerabilties.

  1. If you can upgrade fast, do it.
  2. If you can't but can firewall your project from Internet access, do it.
  3. If you can't, at least apply the following to php.ini to be safer (not fully safe still so aim for upgrade anyway):
memory_limit=-1
post_max_size = 8M ; or more if uploads are needed but upload_max_filesize < post_max_size
session.upload_progress.enabled=0
fatal_error_backtraces=0 ; for PHP 8.5+

; there should be no errors overall with these settings
error_reporting=-1
display_errors=On

Check details in PHP official news.

Additionally:

Related

Tags