| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.0.0, ≤ 7.1.24 |
ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unserialize call for the com, dotnet, or variant class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free