CVE-2025-1219
libxml streams use wrong content-type header when requesting a redirected resource
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
libxml streams use wrong content-type header when requesting a redirected resource
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
Reserved 2025-02-11 | Published 2025-03-30 | Updated 2025-05-23 | Assigner phpTim Düsterhus
github.com/...hp-src/security/advisories/GHSA-p3x9-6h7p-cgfc
Support options
