Security is not optional, especially when it comes to your server-side technology. On July 3, 2025, the PHP development team released PHP 8.3.23, a security update that addresses three important vulnerabilities.

If your projects are running on PHP 8.3, this update is strongly recommended. Here’s what it fixes, why it matters, and how Alox & Co is helping clients stay protected.

What Does PHP 8.3.23 Fix?

• CVE‑2025‑1735: A flaw in the pgsql extension related to escaping logic
• CVE‑2025‑6491: A null pointer issue in XML/SOAP parsing that can lead to crashes
• CVE‑2025‑1220: A null byte bypass in fsockopen() that allows hostname allowlist evasion — potentially enabling internal SSRF attacks

These issues pose real risks for remote code execution, session hijacking, and internal system exposure. CVE Details+13PHP Foundation Discourse+13hadrian.io+13Tenable®hadrian.io+1

Upgrade Urgency

According to both the PHP Foundation and independent sources like the Remi Blog, upgrading to PHP 8.3.23 (or later) is strongly recommended to avoid these serious vulnerabilities. php.net

Alox & Co Is Already On It

Our team has:

• Deployed PHP 8.3.23 for all active clients
• Audited environments for exposure to known CVEs
• Updated our development toolchain to use the latest PHP images

We take security seriously and we treat updates as part of keeping your infrastructure robust.

Final Thoughts

This release is a reminder that even mature, stable technologies like PHP require constant attention. Vulnerabilities can emerge anytime, and the cost of inaction can be high.

If you’re unsure whether your environment is secure, or want to plan for future PHP upgrades (including 8.4, currently in alpha), contact Alox & Co. We’ll keep your projects secure, stable, and ready for anything the web throws your way.

Who's the author?

@aloxteam  •  Alox & Co

This is the official Alox & Co team account, a shared space where our agency speaks with one voice. It’s where we share what we’re building, celebrate milestones, highlight our people, and open the door to conversations with our wider community. While each of our team members has their own voice and perspective, this account captures the bigger picture: company-wide updates, global announcements, and collective insights that reflect not just what we do, but who we are.

alox.co