VulertSecurity VulertSecurity

Vulnerability Database · Debian · php8.2 · Version

php8.2 8.2.5-2

8.2.5-2 is affected by 23 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 1 Medium 0 Low 0 Unrated 22

All php8.2 versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

php8.2 8.2.5-2 vulnerabilities

23 vulnerabilities cover php8.2 8.2.5-2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Command Injection Vulnerability in PHP 8.1, 8.2, and 8.3 due to Windows Codepage Misconfiguration 8.8 high 8.2.24-1~deb12u1 08 Oct 2024
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2026-109618 N/A unrated 8.2.35-1~deb12u1 21 Oct 2026
Critical Vulnerability in PHP 8.2 and 8.4 Packages: CVE-2026-109619 N/A unrated 8.2.35-1~deb12u1 21 Oct 2026
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2026-93682 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2025-1218 Exposed N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP Packages: CVE-2026-6103 Affects PHP 8.2 and 8.4 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP Packages: CVE-2026-92842 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP Packages: CVE-2026-91768 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2026-91769 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP Packages: CVE-2026-91765 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP 8.2 and 8.4 Packages: CVE-2026-91767 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2025-14181 N/A unrated No fix published 24 Sep 2026
Critical Vulnerability in PHP 8.2 and 8.4: CVE-2026-91766 N/A unrated No fix published 24 Sep 2026
Critical Security Update for PHP 8.2: Addressing Multiple Vulnerabilities N/A unrated 8.2.30-1~deb12u1 02 Mar 2026
Critical Security Update for PHP 8.2: Addressing Multiple Vulnerabilities N/A unrated 8.2.29-1~deb12u1 28 Jul 2025
Critical Security Update for PHP 8.2: Addressing Multiple Vulnerabilities N/A unrated 8.2.28-1~deb12u1 14 Mar 2025
Critical Security Update for PHP 8.2: Addressing Multiple Vulnerabilities N/A unrated 8.2.26-1~deb12u1 26 Nov 2024
Command Injection Vulnerability in PHP 8.2: CVE-2024-8926 N/A unrated 8.2.24-1~deb12u1 08 Oct 2024
Critical Security Update for PHP 8.2: Addressing Multiple Vulnerabilities N/A unrated 8.2.24-1~deb12u1 02 Oct 2024
Security Update for php8.2 N/A unrated 8.2.20-1~deb12u1 20 Jun 2024
Critical Vulnerability in PHP 8.2: OpenSSL Private Decrypt Function Affected by Marvin Attack N/A unrated 8.2.18-1 09 Jun 2024
Security Update for php8.2 N/A unrated 8.2.18-1~deb12u1 15 Apr 2024
DSA-5425-1: php8.2 - security update N/A unrated 8.2.7-1~deb12u1 13 Jun 2023

Looking for another version, or everything Vulert holds for php8.2?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About php8.2 8.2.5-2

Is php8.2 8.2.5-2 vulnerable?

Yes. 23 vulnerabilities in the Vulert database cover php8.2 8.2.5-2: 0 critical, 1 high, 0 medium and 0 low, plus 22 not yet rated. Each entry above names the fixed version to move to.

How do I monitor php8.2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php8.2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.