Azure / Azure/wordpress-linux-appservice
Vulnerable PHP Minor Versions
- Dominant language
- HCL
- Stars
- 138
- Forks
- 84
- PR merge metrics
- No merged PRs in 30d
Description
Hello, currently PHP minor version is outdated which makes it vulnerable to [CVE-2026-7261](https://nvd.nist.gov/vuln/detail/CVE-2026-7261). This affects the following versions:
- 8.2.* before 8.2.31
- 8.3.* before 8.3.31
- 8.4.* before 8.4.21
Our team is currently on the 8.2 stack, but it only goes up to 8.2.30. I started testing with 8.4 and saw that only goes up to 8.4.16, so we would be vulnerable either way. Could we get PHP updated?
Contributor guide
No contributing guide indexed for this repository
Research direction
No file or test is named in the issue. Start by locating the PHP version definitions and the build or deployment entry point, then verify that the configured 8.2, 8.3, or 8.4 runtime meets the listed minimum versions and confirm the updated runtime is used successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- infrastructure
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100