https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:35:21.335275+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5458 CVE-2024-5458 — Filter bypass in filter_var (FILTER_VALIDATE_URL) 2026-10-14T22:35:21.338824+00:00

Affected: PHP Group PHP, php, fedoraproject fedora

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

 https://cve.radiocsirt.org/vuln/usn-6841-1 USN-6841-1 — php7.4, php8.1, php8.2, php8.3 vulnerability 2026-10-14T22:35:21.338904+00:00

Affected: Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3

It was discovered that PHP could early return in the filter_var function resulting in invalid user information being treated as valid user information. An attacker could possibly use this issue to expose raw user input information.