Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59303.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-59303
Upstream
Published
2025-03-30T06:15:14Z
Modified
2026-04-01T05:19:28.165071Z
Summary
CVE-2025-1736 affecting package php for versions less than 8.1.32-1
Details

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.

References

Affected packages

Azure Linux:2 / php

Package

Name
php
Purl
pkg:rpm/azure-linux/php

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.1.32-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59303.json"