PHP end of life
PHP end of life: which versions are still supported?
Every PHP version only receives security updates for a limited time. Here you can see which branches are still supported.
Supported PHP versions
| Version | Security updates until |
|---|---|
| PHP 8.5 | 31 Dec 2029 |
| PHP 8.4 | 31 Dec 2028 |
| PHP 8.3 | 31 Dec 2027 |
| PHP 8.2 | 31 Dec 2026 |
| PHP 8.1 | ended (31 Dec 2025) |
| PHP 8.0 / 7.x | ended |
Source: php.net “Supported Versions”. Linux distributions may ship their own backported updates.
Supported does not automatically mean secure
A supported version also has to be patched. For CVE-2026-109618 and CVE-2026-109619 these are the minimum releases:
| Branch | Fix included |
|---|---|
| PHP 8.2 | from 8.2.35 |
| PHP 8.3 | from 8.3.36 |
| PHP 8.4 | from 8.4.27 |
| PHP 8.5 | from 8.5.12 |
What to do with an outdated PHP version
Test the site on a copy, upgrade to a supported branch (recommended: 8.3 or newer) and re-check. The step-by-step guide helps.
Find out how up to date your website is.