Between April 16 and April 30, 2026, MySQL 9.7 became the new long term support release as MySQL 8.0 reached end of life with 8.0.46, and Angular fixed an SSRF in platform-server. Act on this first: plan a move off MySQL 8.0 for any site that still runs it.
Below is a quick summary table, then a section for each release covering what shipped, what it means for you, how we use it in WordPress builds, what it means for mobile apps and what to do next.
At a glance
| Release | Date | Type | Who should care | Action |
|---|---|---|---|---|
| Angular security advisories | Apr 16 | Security | Angular, Ionic Angular and SSR front ends | Update Angular packages |
| MySQL 9.7.0 LTS and MySQL 8.0 end of life | Apr 21 | LTS and end of life | Sites still on MySQL 8.0 | Move off 8.0 |
Angular security advisories
What shipped
The Angular team published these security advisories in this period:
- CVE-2026-41423 (high): SSRF through protocol relative and backslash URLs, in @angular/platform-server
What it means for you
These flaws are in the Angular framework, not in WordPress. They matter if you run an Angular front end, an Ionic Angular app or server side rendering in front of WordPress.
How we use it in WordPress builds
On headless WordPress front ends built with Angular, we update the @angular packages to the fixed version for the project's major line and rerun rendering, login and form tests.
What it means for mobile apps
Ionic Angular apps ship Angular inside the app, so a fix for code that runs in the app needs a rebuild and a new store submission.
What to do next
- Update to Angular 21.2.9, 20.3.19 or 19.2.21 or later.
- Ask our mobile app team to rebuild and resubmit an affected app.
MySQL 9.7 Becomes the New LTS as MySQL 8.0 Reaches End of Life
What shipped
Oracle released MySQL 9.7.0 on April 21, 2026, the second LTS series after 8.4. The same day, MySQL 8.0 shipped its final release:
- MySQL 9.7.0, the new LTS series, 8.4.9 and 8.0.46 were released April 21, 2026.
- MySQL 8.0 reached end of life with 8.0.46; Oracle recommends upgrading to 8.4 LTS or a newer release.
- 9.7.0 adds PBKDF2 storage for caching_sha2_password.
- The Hypergraph Optimizer and JSON Duality View DML are available in the Community edition.
- 9.7.0 bundles OpenSSL 3.5.5, and the Clone plugin supports cloning between consecutive LTS versions higher than 9.7.0.
What it means for you
A database on MySQL 8.0 no longer gets security fixes. Sites still on 8.0 should move to 8.4 LTS or 9.7 LTS.
How we use it in WordPress builds
WordPress runs on 8.4 and newer releases. We move client databases from 8.0 to 8.4 LTS first in most cases, since it is the shortest jump, then test plugins that run custom SQL.
What it means for mobile apps
Apps read data through WordPress, so a database upgrade is invisible to them if the site keeps working. We test app login and checkout after the move.
What to do next
Find out your MySQL version. If it starts with 8.0, plan a move to 8.4 LTS or 9.7 LTS with a full backup first. Our WordPress security and hosting service handles database upgrades.
How AlphaWeb handles updates for you
Platform releases like these rarely change WordPress itself, but they change the servers, databases and app stores your site and app depend on. Our support and maintenance plans cover tested updates on staging first, then in production, and our WordPress security and hosting service keeps PHP, web servers and databases current.
Request a custom development quote, or tell us about your project through our Mission Brief.
Frequently asked questions
Is MySQL 8.0 still safe to run after April 2026?
MySQL 8.0 reached end of life with 8.0.46, so it will not get new security fixes. Plan a move to 8.4 LTS or 9.7 LTS. Our hosting team handles database upgrades.
Brief Us on Your Mission
Want to talk about a website, mobile app, migration or AI project? Fill out the Mission Brief and a specialist will follow up to schedule a call and put together a free quote.
