Anton-Barinov /php2shell-patches
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- Stars
- 127 stars
- Forks
- 22 forks
- Language
- Shell
- License
- Not reported
- Created
- Oct 21, 2026
- Last push
- Oct 30, 2026
- Updated
- Nov 1, 2026
- cve
- hestiacp
- opencart
- php
- php-fpm
- php5
- php7
- rce
- security
- aapanel
- backports
- cve-2026-109618
- cve-2026-109619
- php2shell
- php8
- remicollet
Admitted to the Repository Index on Oct 25, 2026: +102 stars in 7 days.
Star History
14 days recorded, Oct 21, 2026 – Nov 3, 2026 (UTC). Net change +135 stars.
Oct 21, 2026Nov 3, 2026
Oct 21, 2026Nov 3, 2026
Observations
What the Repository Host reported each day.
| Day (UTC) | Stars | Forks | Last push | Archived |
|---|---|---|---|---|
| Nov 3, 2026 | 127 | 22 | Oct 30, 2026 | No |
| Nov 2, 2026 | 127 | 22 | Oct 30, 2026 | No |
| Nov 1, 2026 | 125 | 21 | Oct 30, 2026 | No |
| Oct 31, 2026 | 124 | 21 | Oct 30, 2026 | No |
| Oct 30, 2026 | 122 | 21 | Oct 28, 2026 | No |
| Oct 29, 2026 | 122 | 21 | Oct 28, 2026 | No |
| Oct 28, 2026 | 118 | 21 | Oct 26, 2026 | No |
| Oct 27, 2026 | 114 | 18 | Oct 26, 2026 | No |
| Oct 26, 2026 | 106 | 16 | Oct 25, 2026 | No |