{"id":"CVE-2019-13225","aliases":["ALSA-2020:3662","ALSA-2020:4827","BELL-CVE-2019-13225","DEBIAN-CVE-2019-13225","EUVD-2019-4738","GHSA-cc6v-h3w4-jf38","MGASA-2019-0253","MGASA-2020-0029","RHSA-2020:3662","RHSA-2020:4827","RLSA-2020:3662","RLSA-2020:4827","SUSE-SU-2024:2401-1","openSUSE-SU-2024:11111-1"],"status":"published","title":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02129,"percentile":0.82086,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-07-10T13:50:00Z","modified":"2026-10-29T11:00:24Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"oniguruma","fixed_in":["6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"oniguruma-devel","fixed_in":["6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libonig","fixed_in":["6.9.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libonig","fixed_in":["6.9.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libonig","fixed_in":["6.9.2-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debuginfo","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debugsource","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debuginfo","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debugsource","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-devel","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"oniguruma","fixed_in":["0:6.8.2-2.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"oniguruma","fixed_in":["6.7.0-150000.3.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.9-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.4-1.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.7.1-1.2"}]}],"bundled":7}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oniguruma_project","product":"oniguruma"}],"references":[{"url":"https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201911-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13225","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"},{"url":"https://github.com/advisories/GHSA-cc6v-h3w4-jf38"},{"url":"https://errata.almalinux.org/8/ALSA-2020-3662.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-11039","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11041","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11045","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11047","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11048","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11050","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13224","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13225","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16163","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19203","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19204","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19246","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20454","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7059","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7060","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7062","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7063","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7064","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7065","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7066","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-4827.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-13225","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13225","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0253.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25380","tags":["report"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_3_9","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2020-0029.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25843","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NWOWZZNFSAWM3BUTQNAE3PD44A6JU4KE/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2019/dla-2020","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-19203","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3662","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3662.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11050","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11050","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16163","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19246","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7059","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7063","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7063","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7064","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79282","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7065","tags":["advisory"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_3","tags":["article"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7066","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79329","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4827","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4827.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:3662","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4827","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242401-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1141157","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13225","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26159","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-13225","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2019-07-10T13:50:00Z","modified":"2024-08-04T23:49:23.947Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4738","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2019-07-10T13:50:00Z","modified":"2024-08-04T23:49:23Z","updated_at":"2026-11-03T02:40:43.368399Z"}],"ghsa":[{"id":"GHSA-cc6v-h3w4-jf38","title":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2022-05-24T16:49:54Z","modified":"2023-01-28T05:05:46Z","updated_at":"2026-11-02T14:44:22.417327Z"}],"nvd":[{"id":"CVE-2019-13225","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2019-07-10T14:15:11.7Z","modified":"2026-06-17T02:16:19.777Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:19.195714Z"}],"osv":[{"id":"BELL-CVE-2019-13225","title":"CVE-2019-13225 does not affect BellSoft software","status":"withdrawn","published":"2019-07-10T14:15:00Z","modified":"2026-01-26T09:47:27.178Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-13225","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2019-07-10T14:15:11.7Z","modified":"2026-10-20T13:47:40.496122761Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-13225","description":"A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.","status":"published","published":"2019-07-10T14:15:11.7Z","modified":"2026-09-21T07:03:04.704466772Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2020:3662","title":"Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:36:11Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4827","title":"Red Hat Security Advisory: oniguruma security update","status":"published","published":"2024-09-16T04:33:52Z","modified":"2026-06-27T10:12:13Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-02-04T20:15:13.875002Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2020:4827","title":"Moderate: oniguruma security update","description":"Oniguruma is a regular expressions library that supports a variety of character encodings. \n\nSecurity Fix(es):\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:39:14Z","modified":"2026-02-05T01:00:04.738453Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"ALSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-10-29T11:00:19.53000927Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2020:4827","title":"Moderate: oniguruma security update","description":"Oniguruma is a regular expressions library that supports a variety of character encodings. \n\nSecurity Fix(es):\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:39:14Z","modified":"2026-10-29T11:00:24.425430729Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"MGASA-2019-0253","title":"Updated php packages fix security vulnerabilities","description":"Updated php packages fix security vulnerabilities:\n\nA use-after-free in onig_new_deluxe() in regext.c in the bundled\nOniguruma allows attackers to potentially cause information disclosure,\ndenial of service, or possibly code execution by providing a crafted\nregular expression (CVE-2019-13224).\n\nA NULL Pointer Dereference in match_at() in regexec.c in the bundled\nOniguruma allows attackers to potentially cause denial of service by\nproviding a crafted regular expression (CVE-2019-13225).\n\nFor other fixes in this update, see the referenced changelog.\n","status":"published","published":"2019-09-06T21:09:08Z","modified":"2026-04-16T04:41:20.128620316Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2020-0029","title":"Updated oniguruma packages fix security vulnerabilities","description":"Updated oniguruma packages fix security vulnerabilities:\n\nA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2\nallows attackers to potentially cause information disclosure, denial\nof service, or possibly code execution by providing a crafted regular\nexpression. The attacker provides a pair of a regex pattern and a string,\nwith a multi-byte encoding that gets handled by onig_new_deluxe()\n(CVE-2019-13224).\n\nA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2\nallows attackers to potentially cause denial of service by providing a\ncrafted regular expression (CVE-2019-13225).\n\nOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of\nrecursion in regparse.c (CVE-2019-16163).\n\nAn integer overflow in the search_in_range function in regexec.c leads to\nan out-of-bounds read, in which the offset of this read is under the\ncontrol of an attacker. (This only affects the 32-bit compiled version).\nRemote attackers can cause a denial-of-service or information disclosure,\nor possibly have unspecified other impact, via a crafted regular expression\n(CVE-2019-19012).\n\nAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function\ngb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced\nwithout checking if it passed the end of the matched string. This leads to\na heap-based buffer over-read (CVE-2019-19203).\n\nIn the function fetch_range_quantifier in regparse.c, PFETCH is called\nwithout checking PEND. This leads to a heap-based buffer over-read and\nlead to denial-of-service via a crafted regular expression\n(CVE-2019-19204).\n\nHeap-based buffer over-read in str_lower_case_match in regexec.c can lead\nto denial-of-service via a crafted regular expression (CVE-2019-19246).\n","status":"published","published":"2020-01-11T23:52:04Z","modified":"2026-04-16T04:42:49.957996357Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:11111-1","title":"libonig5-6.9.7.1-1.2 on GA media","description":"These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:06.725105Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2024:2401-1","title":"Security update for oniguruma","description":"This update for oniguruma fixes the following issues:\n\n- CVE-2019-13225: Fixed null-pointer dereference in match_at() in regexec.c (bsc#1141157).\n","status":"published","published":"2024-07-11T04:37:04Z","modified":"2026-02-04T02:59:42.806347Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}