CVE-2025-1736
Stream HTTP wrapper header check might omit basic auth header
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Stream HTTP wrapper header check might omit basic auth header
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
Reserved 2025-02-27 | Published 2025-03-30 | Updated 2025-05-23 | Assigner phpCWE-20 Improper Input Validation
Jakub Zelenka
github.com/...hp-src/security/advisories/GHSA-hgf5-96fm-v528
Support options
