In 2017, 3% of all vulnerabilities listed by the [[National Vulnerability Database]] were linked to PHP;<ref name="CVE">{{cite web | url=httphttps://web.nvd.nist.gov/view/vuln/search/&q=PHPfull-listing | title=National Vulnerability Database (NVD) Search Vulnerabilities Full listing | access-date=20142019-0311-19}}{{dead link|date=March 2018 |bot=InternetArchiveBot |fix-attempted=yes22}}</ref>{{original research inline|date=December 2018}} historically, about 30% of all vulnerabilities listed since 1996 in this database are linked to PHP. Technical security flaws of the language itself or of its core libraries are not frequent (22 in 2009, about 1% of the total although PHP applies to about 20% of programs listed).<ref name="PHP-related vulnerabilities on the National Vulnerability Database">{{cite web
| url=http://www.coelho.net/php_cve.html
| title=PHP-related vulnerabilities on the National Vulnerability Database
