PatchClock

PHP security digest · Packages

phpcsstandards/phpcsutils security advisories

1 advisory we have followed since September 2026, 1 of them critical or high, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. High 29 Sep 2026

    PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

    Fixed in 1.2.3 · CVE-2026-65954

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including phpcsstandards/phpcsutils, and the version that fixes it.