https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:04:50.333599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25236 CVE-2026-25236 — PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution 2026-10-07T15:04:50.350876+00:00

Affected: pearweb

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in version 1.33.0.