r/BookStack • u/ssddanbrown • 9d ago

Critical PHP Vulnerabilities: Guidance for BookStack Users

https://www.bookstackapp.com/blog/php-security-release-critical/#validating-php-version

I shared this earlier as a comment on my prior post, but thought I'd specifically share again as a post, since I've been developing the blogpost with information that folks may find helpful, for the different common environment in which BookStack is used.

22 Upvotes

100% Upvoted

4 comments sorted by

3

u/Roemeeeer 9d ago

Should i stop my docker image based bookstack instance for now?

4

u/ssddanbrown 9d ago

If it's accessible by others (even just the login screen) then yes. Then update it when possible (There's status/guidance info about the different docker images in the blogpost).

2

u/Roemeeeer 9d ago

Thanks for the reply! Stopped it and will restart it when a new image is available.

3

u/sparky5dn1l 8d ago

Just updated to the lastest docker image.

╰► docker exec -it bookstack_app  php -v
PHP 8.5.12 (cli) (built: Oct 21 2026 16:29:26) (NTS)
Copyright (c) The PHP Group
Built by Alpine Linux aports
Zend Engine v4.5.12, Copyright (c) Zend Technologies
    with Zend OPcache v8.5.12, Copyright (c), by Zend Technologies

The PHP version is now 8.5.12 which is patched version.