tocsin

Alpine/php85: high 7.5

cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements t

Action: Upgrade php85 to 8.5.12-r0 or later.

Affected

introducedfixedlast affected
08.5.12-r0-

Fixed versions

8.5.12-r0

Sources

published · modified · JSON