|
1 | 1 | { |
2 | | - "lastUpdatedDate": "2025-06-19T02:52:14+0000", |
| 2 | + "lastUpdatedDate": "2025-06-19T13:38:57+0000", |
3 | 3 | "name": "PHP Version Audit", |
4 | 4 | "website": "https://github.com/lightswitch05/php-version-audit", |
5 | 5 | "licence": "https://github.com/lightswitch05/php-version-audit/blob/master/LICENSE", |
|
4039 | 4039 | "id": "CVE-2024-1874", |
4040 | 4040 | "baseScore": null, |
4041 | 4041 | "publishedDate": "2024-04-29T04:15:00+0000", |
4042 | | - "lastModifiedDate": "2025-02-13T18:16:00+0000", |
| 4042 | + "lastModifiedDate": "2025-06-18T21:12:00+0000", |
4043 | 4043 | "description": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell." |
4044 | 4044 | }, |
4045 | 4045 | "CVE-2024-2756": { |
|
4053 | 4053 | "id": "CVE-2024-2757", |
4054 | 4054 | "baseScore": null, |
4055 | 4055 | "publishedDate": "2024-04-29T04:15:00+0000", |
4056 | | - "lastModifiedDate": "2025-02-13T18:17:00+0000", |
| 4056 | + "lastModifiedDate": "2025-06-18T21:11:00+0000", |
4057 | 4057 | "description": "In PHP 8.3.* before 8.3.5, function\u00a0mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function." |
4058 | 4058 | }, |
4059 | 4059 | "CVE-2024-3096": { |
4060 | 4060 | "id": "CVE-2024-3096", |
4061 | 4061 | "baseScore": null, |
4062 | 4062 | "publishedDate": "2024-04-29T04:15:00+0000", |
4063 | | - "lastModifiedDate": "2025-02-13T18:18:00+0000", |
| 4063 | + "lastModifiedDate": "2025-06-18T21:10:00+0000", |
4064 | 4064 | "description": "In PHP\u00a0 version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if\u00a0a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true." |
4065 | 4065 | }, |
4066 | 4066 | "CVE-2024-4577": { |
|
0 commit comments