Something tells me I'm not getting much sleep tonight. This drops at midnight for me.
I'll try and keep Securing Laravel updated with any details I'm aware of: https://securinglaravel.com/laravel-security-notice-critical-php-security-release/
The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wed, Oct 21st 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2. All PHP users are encouraged to prepare to update.
Earlier release…

Securing LaravelLaravel Security Notice: Critical PHP Security Release ⚠️[Notice #5] A Critical PHP Security Release is coming very soon - you need to be ready to patch your servers.
commit 4e1abe3
Unlucky timing, but given that
twitter has a lot of how out already in leaks and accidental disclosures, that time looks optimistic. Half tempted to turn the server off before I go to bed.