{"id":17744,"date":"2026-10-22T16:27:34","date_gmt":"2026-10-22T13:27:34","guid":{"rendered":"https:\/\/appwizzy.com\/blog\/?p=17744"},"modified":"2026-10-22T16:27:50","modified_gmt":"2026-10-22T13:27:50","slug":"keeping-appwizzy-templates-up-to-date-with-php-security-fixes","status":"publish","type":"post","link":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/","title":{"rendered":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes"},"content":{"rendered":"\n<p>We&#8217;re rolling out security updates across AppWizzy&#8217;s application templates and infrastructure following the disclosure of two serious PHP vulnerabilities: <a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-109618\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-109618<\/a> and <a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-109619\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-109619<\/a>.<\/p>\n\n\n\n<p>These vulnerabilities can allow remote code execution under certain conditions, including through unauthenticated HTTP requests in affected Apache configurations.<\/p>\n\n\n\n<p>Our goal is simple: <strong>new AppWizzy projects should run on updated, tested environments.<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-we-re-updating\"><strong>What We&#8217;re Updating<\/strong><\/h2>\n\n\n\n<p>Our engineering team is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Checking template images for vulnerable PHP packages.<\/li>\n\n\n\n<li>Updating affected components to patched versions.<\/li>\n\n\n\n<li>Rebuilding and testing application environments.<\/li>\n\n\n\n<li>Verifying application startup, database connections, and authentication.<\/li>\n\n\n\n<li>Replacing outdated pre-provisioned machines with updated images.<\/li>\n<\/ul>\n\n\n\n<p>We also review installed dependencies beyond each application&#8217;s primary technology stack.<\/p>\n\n\n\n<p>New projects will use the updated environments as the rollout is completed. Existing deployments have their own runtime versions and may require separate security updates.<\/p>\n\n\n\n<p>Security maintenance doesn&#8217;t stop when an application is generated. Runtime environments, dependencies, and infrastructure need regular updates.<\/p>\n\n\n\n<p><strong>We&#8217;re making these fixes part of the AppWizzy project creation process, so you can focus on building applications while we maintain the environments behind them.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.<\/p>\n","protected":false},"author":24,"featured_media":17745,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"flatlogic_tldr":"AppWizzy is rolling out security updates to templates and infrastructure after two serious PHP CVEs were disclosed.\nThe issues can enable remote code execution, including via unauthenticated HTTP requests in certain Apache setups.\nEngineers are patching PHP packages, rebuilding images, and testing startup, DB connections, and auth flows.\nNew projects will use updated, tested environments; existing deployments may need separate runtime updates.\nSecurity fixes are being built into the project creation process to keep generated environments current.","flatlogic_facts":[{"text":"AppWizzy is updating templates and infrastructure after disclosure of PHP CVE-2026-109618 and CVE-2026-109619.","source":""},{"text":"The disclosed PHP vulnerabilities can allow remote code execution under certain conditions.","source":""},{"text":"In affected Apache configurations, the vulnerabilities can be triggered via unauthenticated HTTP requests.","source":""},{"text":"AppWizzy is rebuilding and testing environments, verifying startup, database connections, and authentication.","source":""},{"text":"New AppWizzy projects will use updated environments as the rollout is completed; existing deployments may need separate updates.","source":""}],"footnotes":""},"categories":[1],"tags":[691,720,692,685],"class_list":["post-17744","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-appwizzy-announcements","tag-php-security","tag-production-readiness","tag-vibe-coding"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.2 (Yoast SEO v26.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes - AppWizzy Blog<\/title>\n<meta name=\"description\" content=\"AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes\" \/>\n<meta property=\"og:description\" content=\"AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/\" \/>\n<meta property=\"og:site_name\" content=\"AppWizzy Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/flatlogic\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-22T13:27:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-22T13:27:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1254\" \/>\n\t<meta property=\"og:image:height\" content=\"1254\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alesia S.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@flatlogic\" \/>\n<meta name=\"twitter:site\" content=\"@flatlogic\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alesia S.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes - AppWizzy Blog","description":"AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/","og_locale":"en_US","og_type":"article","og_title":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes","og_description":"AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.","og_url":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/","og_site_name":"AppWizzy Blog","article_publisher":"https:\/\/www.facebook.com\/flatlogic","article_published_time":"2026-10-22T13:27:34+00:00","article_modified_time":"2026-10-22T13:27:50+00:00","og_image":[{"width":1254,"height":1254,"url":"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png","type":"image\/png"}],"author":"Alesia S.","twitter_card":"summary_large_image","twitter_creator":"@flatlogic","twitter_site":"@flatlogic","twitter_misc":{"Written by":"Alesia S.","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#article","isPartOf":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/"},"author":{"name":"Alesia S.","@id":"https:\/\/appwizzy.com\/blog\/#\/schema\/person\/3dc6d684507e0e4dffe382110b534d87"},"headline":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes","datePublished":"2026-10-22T13:27:34+00:00","dateModified":"2026-10-22T13:27:50+00:00","mainEntityOfPage":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/"},"wordCount":187,"publisher":{"@id":"https:\/\/appwizzy.com\/blog\/#organization"},"image":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#primaryimage"},"thumbnailUrl":"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png","keywords":["AppWizzy Announcements","PHP Security","Production Readiness","vibe-coding"],"articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/","url":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/","name":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes - AppWizzy Blog","isPartOf":{"@id":"https:\/\/appwizzy.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#primaryimage"},"image":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#primaryimage"},"thumbnailUrl":"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png","datePublished":"2026-10-22T13:27:34+00:00","dateModified":"2026-10-22T13:27:50+00:00","description":"AppWizzy rolls out PHP security fixes across application templates and infrastructure, keeping new projects secure, updated, and tested.","breadcrumb":{"@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#primaryimage","url":"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png","contentUrl":"https:\/\/appwizzy.com\/blog\/wp-content\/uploads\/2026\/10\/Obnovleniya-AppWizzy_-ispravleniya-bezopasnosti-PHP.png","width":1254,"height":1254},{"@type":"BreadcrumbList","@id":"https:\/\/appwizzy.com\/blog\/keeping-appwizzy-templates-up-to-date-with-php-security-fixes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/appwizzy.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Keeping AppWizzy Templates Up-to-Date with PHP Security Fixes"}]},{"@type":"WebSite","@id":"https:\/\/appwizzy.com\/blog\/#website","url":"https:\/\/appwizzy.com\/blog\/","name":"Flatlogic Blog","description":"Vibe-coding, AI Agents, Professional Software Development Services, Case Studies and More","publisher":{"@id":"https:\/\/appwizzy.com\/blog\/#organization"},"alternateName":"Flatlogic Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/appwizzy.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/appwizzy.com\/blog\/#organization","name":"Flatlogic","url":"https:\/\/appwizzy.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/appwizzy.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/flatlogic.com\/blog\/wp-content\/uploads\/2025\/10\/62ea6de0b3469aa3d6ebb528-1.png","contentUrl":"https:\/\/flatlogic.com\/blog\/wp-content\/uploads\/2025\/10\/62ea6de0b3469aa3d6ebb528-1.png","width":970,"height":257,"caption":"Flatlogic"},"image":{"@id":"https:\/\/appwizzy.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/flatlogic","https:\/\/x.com\/flatlogic","https:\/\/www.instagram.com\/flatlogiccom\/","https:\/\/www.linkedin.com\/company\/flatlogic\/"]},{"@type":"Person","@id":"https:\/\/appwizzy.com\/blog\/#\/schema\/person\/3dc6d684507e0e4dffe382110b534d87","name":"Alesia S.","url":"https:\/\/appwizzy.com\/blog\/author\/alesya\/"}]}},"_links":{"self":[{"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/posts\/17744","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/comments?post=17744"}],"version-history":[{"count":1,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/posts\/17744\/revisions"}],"predecessor-version":[{"id":17746,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/posts\/17744\/revisions\/17746"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/media\/17745"}],"wp:attachment":[{"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/media?parent=17744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/categories?post=17744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/appwizzy.com\/blog\/wp-json\/wp\/v2\/tags?post=17744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}