CVE-2025-1217
Header parser of http stream wrapper does not handle folded headers
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Header parser of http stream wrapper does not handle folded headers
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.
Reserved 2025-02-11 | Published 2025-03-29 | Updated 2025-05-23 | Assigner phpCWE-20 Improper Input Validation
Tim Düsterhus
github.com/...hp-src/security/advisories/GHSA-v8xr-gpvj-cx9g
Support options
