Debian/php7.4: medium 5.3
In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid U
Action: Upgrade php7.4 to 7.4.14-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.4.14-1 | - |
Fixed versions
| 7.4.14-1 |
Sources
published · modified · JSON