| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.0.0, < 5.4.4 | 5.4.4 |
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free