Threats tagged 'bit-php-2025-1217'

A moderate severity vulnerability exists in PHP's HTTP stream wrapper header parser affecting versions prior to 8.1.32, 8.2.28, 8.3.19, and 8.4.5. The parser incorrectly handles folded HTTP headers, which can cause misinterpretation of HTTP responses including incorrect headers and MIME types. This issue has been addressed by a security update available from Red Hat and other vendors.