From 87ad3e4774bde4806537c7a71c9a64d13aefd2e0 Mon Sep 17 00:00:00 2001
From: dino <dino@solapi.com>
Date: Fri, 23 Oct 2026 08:04:12 +0900
Subject: [PATCH] =?UTF-8?q?docs(readme):=20PHP2Shell=20=EB=9F=B0=ED=83=80?=
 =?UTF-8?q?=EC=9E=84=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=95=88=EB=82=B4=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 5b2aae2..1493e9e 100644
--- a/README.md
+++ b/README.md
@@ -7,6 +7,7 @@ This package is 100% compatible with SOLAPI family services (Purple Book, Nurigo
 ## Requirements
 
 - PHP 7.1 or higher
+  - Security notice (2026-10-21): PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a vulnerability in the PHP runtime itself, not in this SDK. Run PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 or later; for PHP 8.1 and below, apply your distribution's security update.
 - `ext-json` extension
 - `allow_url_fopen` enabled in php.ini (for the default HTTP client)