VYPR

PHAR

by PHP

CVEs (1)

  • CVE-2019-9021CriFeb 22, 2019
    risk 0.65cvss 9.8epss 0.10

    An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when…