VYPR

Hhvm

by Meta

CVEs (1)

  • CVE-2026-119723Nov 11, 2026
    risk 0.00cvss —epss —

    When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any…