Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 62

In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading pot…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21786 Published 2023-08-11 Partial fix · 8.0.30, 8.1.22 +1 CWE-119
Priority MEDIUM 41

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0164 Published 2023-08-11 Partial fix · 8.0.30, 8.1.22 +1 CWE-611