openRuyi Lookout
← Packages

php

autotoolsAdvisory

The PHP Interpreter

Current
8.5.12
Candidate
Stale
License
PHP-3.01

Build

TargetResultLast successful versionSucceeded at
rva23
8.5.12
rva20
Failed
8.5.9
x86_64
8.5.12

Advisory · 1

Query product
phpNVD
Query vendor
phpNVD
Query version
8.5.12NVD

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

  • CVE-2007-3205
    NVD
    Summary
    The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.NVD
    EPSS model date
    2026-11-10FIRST
    EPSS probability
    2.16%FIRST
    Vulnerable CPE criteria
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*NVD
    Aliases
    —NVD
    KEV
    NoCISA
    CVSS_V2
    AV:N/AC:L/Au:N/C:N/I:P/A:NNVD

Description

PHP is a popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.

Changelog

PR · 5

Issue · 1

Checks
MonitorObservationLast checked
Source
Stale
Repository refresh: git fetch exited 128 (authentication)
Version
Stale
Source last confirmed at 2026-11-11T02:02:14+00:00; repository refresh overdue.
Build
Checked
GitHub
Checked
EOL
Checked
Current source cycle 8.5; upstream lifecycle only.
LicenseDiff
Not configured
No reliable monitor identity/configuration.
—
Dependencies
Not configured
No reliable monitor identity/configuration.
—
Advisory
Checked
Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated.
Last attempted
Yanked
Not configured
No reliable monitor identity/configuration.
—