What Ploi says
No Ploi statement about CVE-2026-109618/109619 found on the news page, documentation index or PHP docs category as of 2026-10-22; the newest news post is 20 Oct 2026 (Forgejo update). Not checked: status.ploi.io and ploi.io/security contents.
Check the PHP version
Docs: 'The PHP version card lists every version Ploi supports and marks the ones on the server as Installed.' For a site, click the PHP version in the site details sidebar.
Update PHP
Docs: each installed version on the server PHP page has a Patch option: 'Patch updates the version to its latest patch release, for example from 8.3.10 to 8.3.14.' Whether Ploi's patch already contains the fixed builds is not stated by Ploi.