{"action":"Upgrade php to 8.2.35 (8.2), 8.3.36 (8.3), 8.4.27 (8.4) or 8.5.12 (8.5) or later. Unsupported lines (8.1 and older) get no fix.","affected":[{"fixed":"8.2.35","introduced":"0"},{"fixed":"8.3.36","introduced":"8.3.0"},{"fixed":"8.4.27","introduced":"8.4.0"},{"fixed":"8.5.12","introduced":"8.5.0"}],"component":"php","cve_ids":["CVE-2026-109618"],"ecosystem":"php","exploited":false,"fixed_versions":["8.2.35","8.3.36","8.4.27","8.5.12"],"ghsa_id":"GHSA-w8hw-w9fx-j79w","id":"tcs_01M5JKV2ZG8M75SF2PSFBVW5C0","modified_at":"2026-10-21T13:34:25Z","published_at":"2026-10-21T13:34:25Z","references":["https://www.php.net/archive/2026.php#2026-10-21-5","https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"],"severity":{"label":"critical","score":9.2},"sources":[{"source":"php-runtime","source_id":"CVE-2026-109618","url":"https://www.php.net/archive/2026.php#2026-10-21-5"}],"summary":"RCE via OOM corruption"}