{"action":"Upgrade php82 to 8.2.3-r0 or later.","affected":[{"fixed":"8.2.3-r0","introduced":"0"}],"component":"php82","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.20","exploited":false,"fixed_versions":["8.2.3-r0"],"id":"tcs_01M6GWNEAVAW3EMJVASS2WJX6T","modified_at":"2026-11-03T06:32:42.055149333Z","published_at":"2023-02-16T07:15:10.327Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-0568","https://security.alpinelinux.org/vuln/CVE-2023-0568"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-0568#Alpine:v3.20/php82","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-0568"}],"summary":"In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN s"}