PHP version support
- Sets the minimum supported PHP version to 8.2 ("php": ">=8.2")
Security notice: update your PHP runtime
- On October 21, 2026, the PHP project published a security advisory for two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619). They affect the PHP runtime on servers handling web requests, not the SDK itself.
- Upgrading the SDK does not fix them. To protect your application, update the PHP runtime on every server that runs it to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or install your vendor's patched package.