| Package | Affected versions | Patched versions |
|---|---|---|
| oniguruma | ≤ 6.9.3 | |
| php | ≥ 7.3.0, < 7.3.10 | 7.3.10 |
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free