p PatchFirst

PatchFirst · Latest vulnerabilities

php8.4 vulnerabilities · Page 3

Vulnerabilities published for php8.4 in the last 30 days: 12. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 41

  1. CVE-2025-1217

    Medium · CVSS 6.3EPSS 0.58%Fix available

    Header parser of http stream wrapper does not handle folded headers

    In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

    • Update to 8.4.5-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →