DDEV Foundation

Global cloud / infrastructure

Aliases / services: DDEV / ディーデブ / DDEV Foundation
Official website: https://ddev.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

DDEV (PHP development containers)

Response status: Fixed PHP shipped in DDEV1.25.5
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Foundation supporting the DDEV PHP development environment.

The October26 update recommendsDDEV1.25.5, which ships fixed PHP. Older-DDEV rebuild instructions remain. PHP8.6 is an unpatched release candidate and must not be exposed publicly.

Scope: Exposed development environments are in scope. Check build dates for older PHP; do not expose PHP8.6 RC.

What users should do

Upgrade toDDEV1.25.5 or follow the older-version rebuild procedure and verify with ddev php -v. Do not expose PHP8.6 projects; patch production servers separately.

Official service URL

https://ddev.com/

Source URLs

php2shell guidance for DDEV usershttps://ddev.com/blog/php2shell-what-ddev-users-need-to-know/Response evidence

Related official sources

php2shell guidance for DDEV usersOfficial notice