Skip to content
OpenAdvisories
Medium DSA-5717-1 1 CVE

php8.2 - security update

Published Jun 20, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 12 php8.2 8.2.20-1~deb12u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-5458 EPSS 12%

    Filter bypass in filter_var (FILTER_VALIDATE_URL)

    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user infor…