Vulnerabilities
PHP Critical RCE Flaws Prompt Emergency Patch for Supported Versions
PHP issues urgent security update for two remote code execution flaws rated 9.2, affecting only actively supported branches.
PHP
Everything Vuln Post has reported about PHP: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
PHP Remote Code Execution Flaws: Emergency Patches Scheduled for October 21
Two critical RCE vulnerabilities in PHP versions 5 through 8 require immediate preparation for emergency updates scheduled for next week.
Vulnerabilities
FrankenPHP 1.12.4 Fixes Session Hijacking in Worker Mode
A high-severity flaw in FrankenPHP allows concurrent requests to mix user session IDs, risking account takeover for systems using shared modules.
Vulnerabilities
commonmark Quadratic-Time Table Parsing Flaw Triggers Server Freeze in PHP Apps
A quadratic-time flaw in the commonmark library allows attackers to freeze PHP servers by submitting specially crafted markdown tables.