tocsin

Alpine/php84: high 7.5

cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements t

Action: Upgrade php84 to 8.4.26-r0 or later.

Affected

introducedfixedlast affected
08.4.26-r0-

Fixed versions

8.4.26-r0

Sources

published · modified · JSON