Skip to content
OpenAdvisories

Package · Wolfi

php-8.1

12 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.3

    PHP-FPM logs from children may be altered

    In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output = yes, it may be possible to pollute the final log or remove up to 4 characters fr…

  • Low 3.1

    Erroneous parsing of multipart form data

    In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control …