| Package | Affected versions | Patched versions |
|---|---|---|
| ontap | = 9 | |
| php | ≥ 8.1.0, < 8.1.32≥ 8.2.0, < 8.2.28≥ 8.3.0, < 8.3.19≥ 8.4.0, < 8.4.5 | 8.1.328.2.288.3.198.4.5 |
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free