|
1 | 1 | {
|
2 |
| - "lastUpdatedDate": "2025-07-23T03:03:34+0000", |
| 2 | + "lastUpdatedDate": "2025-07-23T13:45:02+0000", |
3 | 3 | "name": "PHP Version Audit",
|
4 | 4 | "website": "https://github.com/lightswitch05/php-version-audit",
|
5 | 5 | "licence": "https://github.com/lightswitch05/php-version-audit/blob/master/LICENSE",
|
|
4202 | 4202 | },
|
4203 | 4203 | "CVE-2025-1220": {
|
4204 | 4204 | "id": "CVE-2025-1220",
|
4205 |
| - "baseScore": null, |
| 4205 | + "baseScore": 5.3, |
4206 | 4206 | "publishedDate": "2025-07-13T23:15:00+0000",
|
4207 |
| - "lastModifiedDate": "2025-07-14T16:15:00+0000", |
| 4207 | + "lastModifiedDate": "2025-07-22T17:01:00+0000", |
4208 | 4208 | "description": "In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() treat the hostname in different way, thus opening way to security problems if the user code implements access checks before access using such functions."
|
4209 | 4209 | },
|
4210 | 4210 | "CVE-2025-1734": {
|
|
4216 | 4216 | },
|
4217 | 4217 | "CVE-2025-1735": {
|
4218 | 4218 | "id": "CVE-2025-1735",
|
4219 |
| - "baseScore": null, |
| 4219 | + "baseScore": 7.5, |
4220 | 4220 | "publishedDate": "2025-07-13T23:15:00+0000",
|
4221 |
| - "lastModifiedDate": "2025-07-13T23:15:00+0000", |
| 4221 | + "lastModifiedDate": "2025-07-22T17:04:00+0000", |
4222 | 4222 | "description": "In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This\u00a0could cause crashes if Postgres server rejects the string as invalid."
|
4223 | 4223 | },
|
4224 | 4224 | "CVE-2025-1736": {
|
|
4239 | 4239 | "id": "CVE-2025-6491",
|
4240 | 4240 | "baseScore": null,
|
4241 | 4241 | "publishedDate": "2025-07-13T22:15:00+0000",
|
4242 |
| - "lastModifiedDate": "2025-07-14T16:15:00+0000", |
| 4242 | + "lastModifiedDate": "2025-07-22T16:51:00+0000", |
4243 | 4243 | "description": "In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server."
|
4244 | 4244 | }
|
4245 | 4245 | }
|
|
0 commit comments