CVE-2024-57071

The php-parser software, specifically version v3.2.1 , is vulnerable to a prototype pollution (CWE-1321) flaw within the lib.combine function. An attacker can exploit this by supplying a crafted payload to trigger a Denial of Service (DoS) . As a temporary workaround, users are advised to disable...

CVE-2024-57071

A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...