Repository navigation
Security: php/php-src
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Integer overflow to buffer overflow in soap HTTP parsingGHSA-cj93-vc83-wgqv published
Sep 24, 2026 by bukkaModerate -
NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixGHSA-453j-q27h-5p8x published
Jul 3, 2025 by bukkaModerate -
Null byte termination in dns_get_record()GHSA-www2-q4fc-65wf published
Dec 18, 2025 by bukkaLow -
pgsql extension does not check for errors during escapingGHSA-hrwm-9436-5mv3 published
Jul 3, 2025 by bukkaModerate -
Stream HTTP wrapper truncate redirect location to 1024 bytesGHSA-52jp-hrpf-2jff published
Mar 13, 2025 by bukkaModerate -
Streams HTTP wrapper does not fail for headers with invalid name and no colonGHSA-pcmh-g36c-qc44 published
Mar 13, 2025 by bukkaModerate -
Possible out of bounds read when XML_OPTION_SKIP_TAGSTART usedGHSA-wg4p-4hqh-c3g9 published
Mar 13, 2025 by bukkaLow -
Header parser of `http` stream wrapper does not handle folded headersGHSA-v8xr-gpvj-cx9g published
Mar 13, 2025 by bukkaModerate -
Various packet overreads in mysqlnd_writeprotocol.cGHSA-r6x9-5r99-36j7 published
Sep 24, 2026 by bukkaLow -
libxml streams use wrong `content-type` header when requesting a redirected resourceGHSA-p3x9-6h7p-cgfc published
Mar 13, 2025 by bukkaModerate