CVE-2026-119723

HHVM versions prior to 23c061f4e804a51badd5f85227e65185651253b5 are vulnerable to a denial of service flaw during request variable parsing. The root cause is that the system fails to verify if appending a nested array succeeded before attempting to descend into it when processing query-string or ...