Skip to content
This repository was archived by the owner on Sep 21, 2025. It is now read-only.

Commit 286e17e

Browse files
committed
Automatic github actions updates. Changes found @lightswitch05
1 parent 4627ef9 commit 286e17e

1 file changed

Lines changed: 9 additions & 2 deletions

File tree

docs/rules-v1.json

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
{
2-
"lastUpdatedDate": "2025-04-04T13:34:36+0000",
2+
"lastUpdatedDate": "2025-04-05T02:26:25+0000",
33
"name": "PHP Version Audit",
44
"website": "https://github.com/lightswitch05/php-version-audit",
55
"licence": "https://github.com/lightswitch05/php-version-audit/blob/master/LICENSE",
66
"source": "https://www.github.developerdan.com/php-version-audit/rules-v1.json",
77
"releasesCount": 519,
8-
"cveCount": 363,
8+
"cveCount": 364,
99
"supportVersionsCount": 23,
1010
"latestVersion": "8.4.5",
1111
"latestVersions": {
@@ -5936,6 +5936,13 @@
59365936
"lastModifiedDate": "2024-11-26T19:06:00+0000",
59375937
"description": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and \"request_fulluri\" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user."
59385938
},
5939+
"CVE-2024-11235": {
5940+
"id": "CVE-2024-11235",
5941+
"baseScore": null,
5942+
"publishedDate": "2025-04-04T18:15:00+0000",
5943+
"lastModifiedDate": "2025-04-04T20:15:00+0000",
5944+
"description": "In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=\u00a0\u00a0operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution."
5945+
},
59395946
"CVE-2024-11236": {
59405947
"id": "CVE-2024-11236",
59415948
"baseScore": 9.8,

0 commit comments

Comments
 (0)