{"action":"Upgrade php81 to 8.1.17-r0 or later.","affected":[{"fixed":"8.1.17-r0","introduced":"0"}],"component":"php81","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.16","exploited":false,"fixed_versions":["8.1.17-r0"],"id":"tcs_01M6GWNBXQ17HBB6XM7TZSWERP","modified_at":"2026-11-03T06:32:42.055149333Z","published_at":"2023-02-16T07:15:10.327Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-0568","https://security.alpinelinux.org/vuln/CVE-2023-0568"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-0568#Alpine:v3.16/php81","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-0568"}],"summary":"In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN s"}