Security Update

An update from the Project Horizon Team about the PHP security fixes applied to this site.

OUR STATEMENT
Public security statement

Project Horizon PHP security update

22 October 2026 · Project Horizon Team

On 22 October 2026, we updated the PHP runtime used by projecthorizon.xyz to Ubuntu’s patched package version 8.3.6-0ubuntu0.24.04.13. The website was operational after the update.

This update addresses two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, disclosed on 21 October 2026. Ubuntu has confirmed that the package version installed on our server contains its fixes.

Publishing this update does not mean that we have detected an attack or a data breach. We will update this statement if we find evidence of impact that visitors need to know about.

Further information

For questions about Project Horizon, contact support@projecthorizon.xyz.

← Back to Project Horizon