Shell
Anton-Barinov/php2shell-patches
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
★ 130
Stars
23 forks · 1 open issues
+1.1/day
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
27.0
Momentum / 100
see the breakdown below
17d ago
Created
last push 8d ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 6.3 | +1.1/day, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 0.0 | needs 7-day and 30-day rates side by side |
| Freshness | 15 | 14.5 | last push 8d ago; decays to zero at 180 days |
| Scale | 15 | 6.1 | 130 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 27.0 | sum of the above |
Detail
| Topics | aapanelbackportscvecve-2026-109618cve-2026-109619hestiacpopencartphpphp-fpmphp2shellphp5php7php8rceremicolletsecurity |
| Matched on | Security (security) |
| Short window | +8 stars over 7 days = 1.1/day |
| Long window | no snapshot 14–45 days old yet |
| Lifetime average | 8.73 stars/day over 15 days |
| First seen here | 2026-10-23 |
| Last read | 2d ago |