Debian/php-getid3: unknown
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft mali
Action: Upgrade php-getid3 to 1.9.27+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.27+dfsg-1 | - |
Fixed versions
| 1.9.27+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-94108#Debian:14/php-getid3
- https://security-tracker.debian.org/tracker/CVE-2026-94108
published · modified · JSON