php/php-src

View on GitHub

The PHP Interpreter

Stars: 40.4k
Forks: 8.1k
Open beginner issues: 6
Indexed issues: 971
Avg merge: 2d 13h
Merged PRs (30d): 96

Dominant language: C
License: BSD-3-Clause
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

971 open issues indexed

Support Explicit Backed Enum casting Open

Category: Engine Feature Status: Requires RFC

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22288 · 7 comments · Opened Jun 12, 2026
Segfault on PHP 8.4.22 on CPU without AVX (Braswell) Open

Bug Category: Engine Status: Verified

php/php-src#22269 · 2 comments · 1 assignee · Opened Jun 10, 2026
Change in variable assignment behavior as argument Open

Bug Category: Engine Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22256 · 1 comment · Opened Jun 8, 2026
"opcache.memory_consumption cannot be changed when OPcache is already set up" warning on 8.5 ZTS Open

Bug Extension: opcache Status: Verified

Difficulty 3/5 1-2 days Newbie friendliness 58/100

php/php-src#22216 · Opened Jun 3, 2026
opcache.dups_fix is honored for duplicate classes but not duplicate functions Open

Bug Extension: opcache Status: Needs Triage

Difficulty 3/5 1-2 days Newbie friendliness 78/100

php/php-src#22214 · Opened Jun 2, 2026
[RFC] True native async implementations Open

Feature Status: Requires RFC

Difficulty 5/5 Over a week Newbie friendliness 20/100

php/php-src#22197 · 16 comments · 24 reactions · Opened Jun 1, 2026
AES-GCM-SIV encrypts message incorrectly Open

Bug Extension: openssl Status: Needs Triage

php/php-src#22188 · 4 comments · 1 assignee · Opened May 29, 2026
PHPDbg misidentifies uncaught exception when exception is not yet loaded Open

Bug SAPI: phpdbg Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22168 · Opened May 28, 2026
Explicilty passing default value for escape in SplFileObject::fgetcsv changes outcome Open

Bug Extension: spl Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#22156 · Opened May 27, 2026
json_file_encode()/json_file_decode(): provide a higher‑level, file‑oriented shortcut Open

Extension: json Feature Status: Needs Triage

Difficulty 5/5 Over a week Newbie friendliness 45/100

php/php-src#22137 · 2 comments · Opened May 23, 2026
add support for OpenSSH's bcrypt variant? Open

Feature Status: Needs Triage

Difficulty 5/5 Over a week Newbie friendliness 35/100

php/php-src#22136 · Opened May 23, 2026
BcMath\Number::createFrom Open

Extension: bcmath Feature Status: Needs Triage

php/php-src#22128 · 2 comments · 1 assignee · Opened May 22, 2026
SQLite3 authorizer callback `$this` freed via `setAuthorizer` during execution (Use After Free) Open

Bug Extension: sqlite3 Status: Needs Triage

php/php-src#22122 · 1 assignee · Opened May 22, 2026
Spinning 100% CPU in zend_hash_find_bucket Open

Bug Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 35/100

php/php-src#22117 · Opened May 22, 2026
Tracing JIT drops loop-PHI CV register from SNAPSHOT after intermediate op1_def Open

Bug Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 38/100

php/php-src#22115 · Opened May 21, 2026
Regression in 8.5: float values are treated as invalid when updating LDAP values Open

Bug Extension: ldap Status: Needs Triage

php/php-src#22108 · 3 comments · 1 assignee · Opened May 21, 2026
Feature: walker function: walker(".") returns an object model of the entire directory / an expansive alternative for scandir() Open

Feature Status: Needs Triage

Difficulty 5/5 Over a week Newbie friendliness 25/100

php/php-src#22104 · 5 comments · Opened May 21, 2026
Tracing JIT: SIGSEGV via mis-targeted side-exit into execute_ex (VM-stack call-frame alloc), PHP 8.5.6 Open

Category: JIT

Difficulty 5/5 Over a week Newbie friendliness 25/100

php/php-src#22102 · 2 reactions · Opened May 20, 2026
JIT bug: composer install sometimes hangs Open

Bug Category: JIT Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#22086 · 1 comment · Opened May 19, 2026
Segfault in PHP-FPM with tracing JIT (opcache.jit=1205) due to stale base pointer in rbp (Regression in 8.5.5) Open

Bug Category: JIT SAPI: fpm

php/php-src#22084 · 7 comments · 9 reactions · 1 assignee · Opened May 18, 2026
FFI offset CData holds dangling pointer after base object GC (trivially exploitable Use After Free) Open

Bug Extension: ffi Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22064 · 4 comments · Opened May 16, 2026
Stream filter chain UAF via self-removal during callback Open

Bug Category: Streams Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22063 · Opened May 16, 2026
Class autoloader `$this` freed via `spl_autoload_unregister` during dispatch (exploitable UAF) Open

Bug Extension: spl Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#22060 · Opened May 16, 2026
Inconsistent/missing checks for sqlite3 APIs Open

Bug Extension: sqlite3 Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#22051 · Opened May 15, 2026
The unserialize function with ArrayIterator leads to NULL pointer dereference when object cloned Open

Bug Category: Serialization Extension: spl Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#22049 · 1 comment · Opened May 15, 2026
CURLOPT_SSLENGINE loads arbitrary shared objects Open

Bug Extension: curl Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#22035 · 1 comment · Opened May 13, 2026
PDO\Sqlite::loadExtension loads arbitrary shared objects Open

Bug Extension: pdo_sqlite Status: Needs Triage

php/php-src#22034 · 1 assignee · Opened May 13, 2026
GC assertion zend_gc_delref(zend_refcounted_h *): Assertion `p->refcount > 0' failed Open

Bug Status: Verified

php/php-src#21999 · 1 assignee · Opened May 10, 2026
integer overflow in imagepng Open

Bug Extension: gd Status: Verified

Difficulty 3/5 1-2 days Newbie friendliness 52/100

php/php-src#21994 · 5 comments · Opened May 10, 2026
symlink() on dangling symlink returns true and creates link at wrong location Open

Bug Status: Needs Triage

Difficulty 3/5 1-2 days Newbie friendliness 68/100

php/php-src#21992 · 2 comments · Opened May 9, 2026
Dechunk incorrectly truncates string when it starts with a hex character Open

Extension: filter Feature Status: Requires RFC

Difficulty 3/5 1-2 days Newbie friendliness 58/100

php/php-src#21983 · 10 comments · 1 reaction · Opened May 8, 2026
[Soap] [DateTime] SoapVar mandatory for Datetime? Also from_xml still needed in SoapClient? Open

Extension: soap Feature Status: Needs Triage

php/php-src#21981 · 10 comments · 1 assignee · Opened May 8, 2026
PHP-FPM: disabled_functions = <random function> causes segfault Open

Bug SAPI: fpm Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 52/100

php/php-src#21974 · 6 comments · 1 reaction · Opened May 7, 2026
Harden open_basedir restrictions in various extensions (or even deprecate open_basedir) Open

Feature Status: Needs Triage

Difficulty 5/5 Over a week Newbie friendliness 35/100

php/php-src#21971 · 10 comments · 3 reactions · Opened May 7, 2026
open_basedir bypass via getcwd() failure and race condition Open

Bug Category: Streams Status: Verified

php/php-src#21961 · 2 reactions · 1 assignee · Opened May 6, 2026
[DOM] heap-use-after-free in php_dom_object_get_data when DOMNotation object is accessed after its owning DOCTYPE is removed Open

Bug Extension: dom Status: Verified

php/php-src#21952 · 2 comments · 1 assignee · Opened May 5, 2026
SNMP tests fail on windows platforms in Github CI Open

Bug Category: Tests Extension: snmp OS: Windows Status: Verified

Difficulty 3/5 1-2 days Newbie friendliness 48/100

php/php-src#21919 · Opened Apr 30, 2026
File-level declare to control OPcache behavior and PHP-target hint Open

Extension: opcache Feature Stale Status: Requires RFC

Difficulty 5/5 Over a week Newbie friendliness 30/100

php/php-src#21895 · 1 comment · Opened Apr 28, 2026
mbstring: Do functions marked “TODO Return void” require an RFC to change return type? Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

php/php-src#21958 · 4 comments · Opened Apr 26, 2026
`pdo_pgsql`: `DEALLOCATE` on statement destruct silently aborts enclosing transaction if it fails Open

Bug Extension: pdo_pgsql Status: Needs Triage

php/php-src#21869 · 8 comments · 1 assignee · Opened Apr 24, 2026
Crash in unserialize() Open

Bug Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#21824 · 1 comment · Opened Apr 21, 2026
Heap use-after-free in zend_object_is_lazy Open

Bug Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 42/100

php/php-src#21776 · Opened Apr 16, 2026
SHM_PROTECT/SHM_UNPROTECT race in opcache under ZTS with multiple threads and protect_memory=1 Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

php/php-src#21772 · Opened Apr 16, 2026
Assertion failure at ext/reflection/php_reflection.c Open

Bug Extension: reflection Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 25/100

php/php-src#21768 · Opened Apr 16, 2026
FTBFS against OpenSSL 4.0.0 Open

Bug Extension: openssl Status: Needs Triage

php/php-src#21762 · 4 comments · 1 reaction · 1 assignee · Opened Apr 14, 2026
Use of PIDFile= in php-fpm.service Open

Bug SAPI: fpm Status: Needs Triage

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

php/php-src#21740 · 1 reaction · Opened Apr 13, 2026
Assertion failure `_php_stream_seek` at streams/streams.c Open

Bug Category: Streams Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 45/100

php/php-src#21700 · Opened Apr 10, 2026
Assertion failure in zend_enum_fetch_case_name() when calling array_walk() on an enum case value after try/catch block Open

Bug Category: Engine Status: Verified

Difficulty 4/5 3-5 days Newbie friendliness 42/100

php/php-src#21687 · Opened Apr 9, 2026
password_verify() failed to verify bcrypt passwords containing null bytes Open

Bug Extension: standard Status: Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

php/php-src#21673 · Opened Apr 8, 2026
Expired Certs in OpenSSL tests - tests fail Open

Bug Extension: openssl Status: Needs Triage

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

php/php-src#21672 · 1 comment · 1 reaction · Opened Apr 8, 2026

php/php-src

Get new issues in your inbox