Search results

Heap buffer overflow in zval_undefined_cv() via invalid CV dimension unset during destructor

Bug

Status: Verified

Status: Open.

#20403 In php/php-src;

· vi3tL0u1s opened on Nov 6, 2025

8.4.14 does not compile: conftest.c:89:36: error: expected expression before ')' token

Bug

Status: Needs Feedback

Status: Open.

#20401 In php/php-src;

· epudwjuhc opened on Nov 5, 2025

\Dom\ParentNode::querySelector and \Dom\ParentNode::querySelectorAll requires elements in $selectors to be lowercase

Bug

Extension: dom

Status: Verified

Status: Open.

#20395 In php/php-src;

· DeveloperRob opened on Nov 5, 2025

Intl::composeLocale does not consider subtags

Extension: intl

Feature

Status: Verified

Status: Open.

#20393 In php/php-src;

· frederikbosch opened on Nov 5, 2025

Confirm if ob_gzhandler is impacted by ob_start handler changes

Bug

Status: Needs Triage

Status: Open.

#20384 In php/php-src;

· andrewnicols opened on Nov 4, 2025

User filters allow breaking typed properties

Bug

Category: Streams

Extension: standard

Status: Verified

Status: Open.

#20370 In php/php-src;

· ndossche opened on Nov 2, 2025

OpenSSL Stream Context SSL Session Reuse

Category: Streams

Extension: openssl

Feature

Status: Open.

#20367 In php/php-src;

· tsmgeek opened on Nov 2, 2025

ext-uri when to throw ValueError vs InvalidUriException

Bug

Extension: uri

Status: Needs Triage

Status: Open.

#20366 In php/php-src;

· nyamsprod opened on Nov 2, 2025

UAF in php_output_handler_free via re-entrant ob_start() during error deactivation

Bug

Category: Engine

Status: Verified

Status: Open.

#20352 In php/php-src;

· vi3tL0u1s opened on Nov 1, 2025

Fatal error: Uncaught Error: Maximum call stack size of 8306688 bytes (zend.max_allowed_stack_size - zend.reserved_stack_size) reached. Infinite recursion? in 8.3.27 and 8.4.14

Bug

Status: Verified

Status: Open.

#20338 In php/php-src;

· alexander-schranz opened on Oct 30, 2025

Observer API: Function invocation tracking

Feature

Status: Needs Triage

Status: Open.

#20336 In php/php-src;

· th3r0b0t opened on Oct 30, 2025

timezone_abbreviations_list does not show correct abbreviation for Asia/Colombo

Bug

Extension: date

Status: Needs Triage

Status: Open.

#20323 In php/php-src;

· Slatery opened on Oct 28, 2025