As per the updated PHP Security & Runtime Policy (Effective: August 25, 2026), the following 10 core packages contain deprecated methods or critical security vulnerabilities and must be updated immediately to prevent service disruption.
| # | Package Name | Installed | Required | Status |
|---|---|---|---|---|
| 01 | guzzlehttp/guzzle | v7.4.5 | ^7.9.0 | OUTDATED |
| 02 | symfony/http-foundation | v6.2.0 | ^7.1.0 | DEPRECATED |
| 03 | phpmailer/phpmailer | v6.6.0 | ^6.9.1 | SECURITY FIX |
| 04 | monolog/monolog | v2.8.0 | ^3.7.0 | OUTDATED |
| 05 | league/flysystem | v3.1.0 | ^3.28.0 | INCOMPATIBLE |
| 06 | firebase/php-jwt | v6.3.0 | ^6.10.0 | SECURITY FIX |
| 07 | twig/twig | v3.4.0 | ^3.10.0 | OUTDATED |
| 08 | doctrine/dbal | v3.5.0 | ^4.0.0 | DEPRECATED |
| 09 | vlucas/phpdotenv | v5.4.0 | ^5.6.0 | OUTDATED |
| 10 | phpunit/phpunit | v9.5.0 | ^10.5.0 | UNSUPPORTED |
$ composer update guzzlehttp/guzzle symfony/http-foundation phpmailer/phpmailer monolog/monolog league/flysystem firebase/php-jwt twig/twig doctrine/dbal vlucas/phpdotenv phpunit/phpunit