Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHP 8.2.33, 8.3.33 and 2 more versions Clear all filters
TI-2026-06374 CVE-2026-7260

Stack overflow in phar with circular symlinks

Priority LOW 23

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.2…

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.00114 Published 2026-07-30 Partial fix · 8.2.33, 8.3.33 +2 CWE-121
TI-2026-14390 CVE-2026-17543

SQL injection in ext-pgsql via E'...' backslash breakout

Priority MEDIUM 43

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8…

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.0033 Published 2026-07-30 Partial fix · 8.2.33, 8.3.33 +2 CWE-89