CVE-2022-26635
CVE-2022-26635 affects PHP-Memcached v2.2.0 and below, due to improper NULL termination that enables CLRF injection. Connected advisories indicate an upgrade exists for affected memcached packages (e.g., ALAS advisories for various PHP/pecl-memcached versions and Mariner package memcached