# Gibbon v30.0.02 (Important Security Release)

**URL:** <https://ask.gibbonedu.org/t/gibbon-v30-0-02-important-security-release/15610>\
**Category:** General\
**Created:** [November 9, 2026, 9:47am UTC](https://ask.gibbonedu.org/t/gibbon-v30-0-02-important-security-release/15610 "2026-11-09T09:47:43Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![sandra](https://ask.gibbonedu.org/user_avatar/ask.gibbonedu.org/sandra/32/5_2.png) [@sandra](https://ask.gibbonedu.org/u/sandra)\
**Post date:** [November 9, 2026, 9:47am UTC](https://ask.gibbonedu.org/t/gibbon-v30-0-02-important-security-release/15610/1 "2026-11-09T09:47:43Z")

</div>

Dear Gibbon Community,

The following message outlines three important issues to bring to your attention:

1. Gibbon v30.0.02, an important security release

2. Updates about Gibbon’s future release cycle

3. A reminder to update all PHP systems to the latest patched version

Globally, as the power of computing increases, AI tools are increasingly used to scan and probe software systems for vulnerabilities. In recent weeks, the world has seen [an unprecedented wave of AI-accelerated cybersecurity vulnerabilities](https://en.wikipedia.org/wiki/Black_October_(information_security)). Gibbon has likewise received a number of security advisories in a short span of time. At this time, we are not aware of any data breach of Gibbon systems, and have been working proactively to create a patch release for identified vulnerabilities.

**[Gibbon v30.0.02 is an essential security update](https://gibbonedu.org/download/)** for all current installations. It does not contain any new features so that it can be applied seamlessly to any current v30 install. If you are not running v30 yet, we highly recommend updating to ensure you have the latest fixes and security patches. See the [update instructions in the docs](https://docs.gibbonedu.org/guides/administration/updating-gibbon) for more info.

In light of the increased cybersecurity awareness, we have paused development of new features for Gibbon and will be focusing upcoming releases on security improvements. A top priority of this focus will be to build an auto-update feature into Gibbon so that we can deploy patches to our community faster and seamlessly.

We anticipate additional patch releases for Gibbon v30 in the coming weeks. As such, we have decided to delay development of v31 until this essential security work is released to the community. Gibbon v31 will not be released on our originally planned date of Nov 20, 2026. We will share an update with information about future release cycles in the coming months.

**If you have not already updated your PHP version since Oct 21, 2026, please do so immediately**. Note that this is not a vulnerability in Gibbon itself, but in the underlying programming language, which is a global vulnerability affecting upwards to 70% of the internet. See [our forum post](https://ask.gibbonedu.org/t/important-security-notice-php-vulnerability-action-required-for-all-school-administrators/15608) for more information.

Our sincere thanks to the following security researchers for their help to analyze and identify security improvements for Gibbon, and coordinate with us following responsible disclosure practices. Information about our security policy can be found on[our GitHub repository](https://github.com/GibbonEdu/core/security/policy).

- Sabuhi Mammadov

- Seydina Mouhamed Rassoul Sow ([Mouha7](https://github.com/Mouha7))

- Tieku Bortei-Doku ([tiekubd](https://github.com/tiekubd/), [High Point Education](https://highpointedu.com/))

- Santiago Cantero ([MrCanter](https://github.com/MrCanter))

- Abiodun Victor

- Abdullah Kareem ([cyberkareem](https://github.com/CyberKareem))

- Nathan Lima ([M4ru-0x03](https://github.com/M4ru-0x03))

- Nguyễn Bá Chí Tân ([Caycon](https://github.com/Caycon))

- Arpit Jain ([arpitjain099](https://github.com/arpitjain099))

- Asadbek Fatullayev

- Tatsuki Onishi

- 360 AlphaLab

- Tahiniii ([tahiniii](https://github.com/tahiniii))

## Important Notes for v30.0.02

- Gibbon requires a minimum PHP version of 8.0 and MySQL version of 8.0. Please check to ensure your server supports this requirement. Gibbon v30 supports up to PHP 8.3, which is currently the highest recommended version.

- Always backup your files and database before upgrading.