Files
wordpress/tests
trav 7fc19b6264
cc-ci/testme cc-ci: success
fix: disable session.upload_progress (CERT-EU 2026-018 / CVE-2026-109619)
PHP 8.3.35 in wordpress:7.1.3 is vulnerable to CVE-2026-109618 and
CVE-2026-109619. The real fix is the rebuilt official image on PHP
8.3.36; this disables the confirmed session upload-progress exploit
path as defence in depth and bumps the version so operators redeploy
and re-pull the image.
2026-10-21 09:35:10 -07:00
..
2026-06-02 23:36:02 +01:00