vulnerability

Alpine Linux: CVE-2025-1219: Inaccurate Comments

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Mar 30, 2025
Added
Aug 8, 2025
Modified
Dec 5, 2025

Description

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.

Solutions

alpine-linux-upgrade-php81alpine-linux-upgrade-php82alpine-linux-upgrade-php83
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.