The PHP project has released fixes for the vulnerabilities.

We urge you to update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, released on 21.10.26.

Nextcloud AIO v14.4.1 and Nextcloud E-AIO v8.4.0 will include the updated PHP versions. We will publish these versions once the underlying base images are available.

Official advisory: https://www.php.net/index.php#2026-10-21-5