When does your PHP version stop getting fixes?
End-of-life dates for PHP and the main PHP frameworks, taken from the maintainers' own pages. As of 25 October 2026.
Next dates to watch
- Symfony 6.4: bug fixes end in November 2026, security fixes in November 2027.
- PHP 8.2: security fixes end on 31 December 2026.
- PHP 8.4: bug fixes end on 31 December 2026; security fixes continue until 31 December 2028.
- Laravel 12: security fixes end on 24 February 2027.
What the three stages mean
Supported: reported bugs and security issues are fixed, with regular releases.
Security fixes only: only security issues are fixed, as needed. Ordinary bugs stay.
End of life: no fixes at all. The software keeps running, but newly found vulnerabilities stay open.
PHP
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| 8.5 | Supported | |||
| 8.4 | Supported | |||
| 8.3 | Security fixes only | |||
| 8.2 | Security fixes only | |||
| 8.1 | – | – | End of life | |
| 8.0 | – | – | End of life | |
| 7.4 | – | – | End of life | |
| 7.3 | – | – | End of life | |
| 7.2 | – | – | End of life | |
| 7.1 | – | – | End of life | |
| 7.0 | – | – | End of life | |
| 5.6 | – | – | End of life | |
| 5.5 | – | – | End of life | |
| 5.4 | – | – | End of life | |
| 5.3 | – | – | End of life |
Source: php.net · As of 25 October 2026
Recent PHP versions get two years of bug fixes and two more years of security fixes, ending on 31 December. PHP 8.2 is the next branch to go: what to do before 31 December 2026 and how we upgrade PHP.
Laravel
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| 13 | Supported | |||
| 12 | Security fixes only | |||
| 11 | End of life | |||
| 10 | End of life | |||
| 9 | End of life | |||
| 8 | End of life | |||
| 7 | End of life | |||
| 6 LTS | End of life | |||
| 5.8 | End of life | |||
| 5.5 LTS | End of life |
Source: laravel.com · As of 25 October 2026
Laravel gives each major version 18 months of bug fixes and 2 years of security fixes. Laravel 13 bug fixes run until Q3 2027.
Symfony
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| 8.1 | Supported | |||
| 8.0 | End of life | |||
| 7.4 LTS | Supported | |||
| 7.3 | End of life | |||
| 7.2 | End of life | |||
| 7.1 | End of life | |||
| 7.0 | End of life | |||
| 6.4 LTS | Supported | |||
| 6.3 | End of life | |||
| 6.2 | End of life | |||
| 6.1 | End of life | |||
| 6.0 | End of life | |||
| 5.4 LTS | Security fixes only | |||
| 5.3 | End of life | |||
| 5.2 | End of life | |||
| 5.1 | End of life | |||
| 5.0 | End of life | |||
| 4.4 LTS | End of life | |||
| 3.4 LTS | End of life | |||
| 2.8 LTS | End of life | |||
| symfony 1.x | – | – | No date announcedsymfony 1 is outside the symfony.com release list (the release API covers 2.0 and later). Community fork: FriendsOfSymfony1. | End of life |
Source: symfony.com · As of 25 October 2026
Symfony publishes months, not days. Long-term support versions (x.4) get 3 years of bug fixes and 4 years of security fixes. Security support for Symfony 5.4 has been extended to February 2029.
Zend Framework and Laminas
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| Zend Framework 1 | – | – | End of life | |
| Zend Framework 2 | – | – | End of life | |
| Laminas MVC | – | – | Security fixes only |
As of 25 October 2026
Zend Framework 1 reached end of life in 2016. The community fork zf1-future keeps it running on newer PHP; its maintainers list PHP 8.2 as the newest tested version. Laminas MVC gets security fixes only until 31 December 2028 and will not be updated for PHP 8.5. The Laminas project recommends Mezzio as the way forward.
CodeIgniter
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| 4.x | – | – | No date announcedOnly the latest release is maintained (v4.7.5 on 2026-10-24). PHP 8.5 needs 4.7.0 or later. | Supported |
| 3.x | – | – | No date announcedLegacy version in maintenance, mostly security updates (current 3.1.13). No end date announced. | Security fixes only |
Source: codeigniter.com · As of 25 October 2026
CodeIgniter maintains only the latest 4.x release. CodeIgniter 3 is in maintenance with mostly security updates and no announced end date. Moving from 3 to 4 is closer to a rewrite than an upgrade.
CakePHP
| Version | Released | Bug fixes until | Security fixes until | Status |
|---|---|---|---|---|
| 5.x | – | No date announcedActive: 5.4. Security fixes: 5.2 to 5.4. | Supported | |
| 4.x | – | End of life | ||
| 3.x | – | – | No date announcedMarked unsupported by the CakePHP team; no end date published. Last branch 3.10. | End of life |
| 2.x | – | – | No date announcedMarked unsupported by the CakePHP team; no end date published. Last branch 2.10. | End of life |
Source: book.cakephp.org · As of 25 October 2026
CakePHP 4.x security support ended on 10 September 2026. CakePHP 3 and 2 are no longer supported.
What to do if your version is on this page
01
Check what you run
php -von the server andcomposer showin the project tell you the PHP and framework versions. Lock Check reads yourcomposer.lockand shows the dates that apply to your project.02
Find the gap
Which supported version can you reach, and what's in the way? Packages, PHP features, custom code.
03
Plan before the date
A Debt Check shows the gap and gives you three options with price ranges in 3 business days.
End-of-life questions
Is it illegal to run an end-of-life PHP version?
Not in itself. But rules such as the GDPR (Article 32) and NIS2 expect appropriate security measures, and auditors and customer questionnaires often ask if your software is still supported.
My host still offers PHP 7.4. Am I fine?
Your host keeps it running, but the PHP project no longer fixes it. Some Linux distributions and hosts backport security patches for old versions, sometimes for a fee. Check exactly what they cover.
What does LTS mean?
Long-term support: a release the maintainers support for longer than usual. Symfony marks every x.4 version as LTS.
Where do these dates come from?
From the maintainers: php.net, laravel.com, symfony.com, getlaminas.org, framework.zend.com, codeigniter.com and book.cakephp.org. Each table links its source. Where a maintainer gives no date, we say so instead of guessing.
How current is this page?
We re-check the dates against the official sources at least once a quarter and when a new version is released. The date at the top shows the last check.
Plan the upgrade before the date
Send us your composer.lock and your PHP version: a link to the repository, or the file as an email attachment. We'll tell you what an upgrade involves and roughly what it costs.