Search for packages
| purl | pkg:alpm/archlinux/php@8.0.10-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-tawz-4cft-97bd
Aliases: CVE-2021-21706 |
In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T18:26:34.268660+00:00 | Arch Linux Importer | Affected by | VCID-tawz-4cft-97bd | https://security.archlinux.org/AVG-2420 | 38.0.0 |