End of life / PHP / 8.0 / CVEs
Known CVEs in PHP 8.0
6 known CVEs reach PHP 8.0, the most severe rated CRITICAL. Every one of them publishes an affected range that includes this release.
By severity
- CRITICAL
- 1
- HIGH
- 2
- MEDIUM
- 1
- LOW
- 2
Every advisory that reaches 8.0
| Advisory | Severity | CVSS | Published | Fixed in |
|---|---|---|---|---|
| CVE-2023-3824 Buffer overflow and overread in phar_dir_read() | CRITICAL | 9.4 | 5 August 2023 | 8.0.30 |
| CVE-2023-3823 Security issue with external entity loading in XML without enabling it | HIGH | 8.6 | 5 August 2023 | 8.0.30 |
| CVE-2023-0662 DoS vulnerability when parsing multipart request body | HIGH | 7.5 | 15 February 2023 | 8.0.28 |
| CVE-2024-5458 Filter bypass in filter_var (FILTER_VALIDATE_URL) | MEDIUM | 5.3 | 9 June 2024 | no fixed version published |
| CVE-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP | LOW | - | 12 June 2023 | 8.0.29 |
| CVE-2023-0567 BCrypt hashes erroneously validate if the salt is cut short by `$` | LOW | - | 15 February 2023 | 8.0.28 |
A further 1 advisories publish no version range, so whether they reach 8.0 cannot be determined from the advisory alone.
Support dates for this release
PHP 8.0 end of life carries the support window, the countdown to it and the release to move to next. This one is End of life and leaves support on 26 November 2023.
Vendor sources last checked 23 October 2026, and checked daily. This data last changed on 23 October 2026.
Be told before PHP 8.0 runs out
One email, ahead of the date, and nothing else. No account, no newsletter, and every message carries a link that stops them for good.
This is one release, on one machine, read by hand
You had to already know which release you were on to look this up. StackDrift scans your machines, works out the build each one is running and mails you when a CVE lands on something you have deployed, across every runtime, operating system and kernel underneath your code.
A card is needed to open the trial and nothing is charged until it ends.