Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2020-7059 — MEDIUM severity vulnerability | Release Alert

CVE-2020-7059

6.5

MEDIUMCVSS v3

Published

February 10, 2020

CVSS v2

6.4 MEDIUM

Affected

5 projects

Assigned by

[email protected]

Severity scale

010

Description

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

NPM

>= 7.4.0, < 7.4.2, >= 7.2.0, < 7.2.27, >= 7.3.0, < 7.3.14NVD

Crates.ioRust bindings for the PHP runtime

>= 7.4.0, < 7.4.2, >= 7.2.0, < 7.2.27, >= 7.3.0, < 7.3.14NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

Allows you to run PHP code in Node.js in various ways.

>= 7.4.0, < 7.4.2, >= 7.2.0, < 7.2.27, >= 7.3.0, < 7.3.14NVD

Python Package IndexHandle some of the strange standards in PHP projects

>= 7.4.0, < 7.4.2, >= 7.2.0, < 7.2.27, >= 7.3.0, < 7.3.14NVD

Docker HubOfficial openSUSE Leap Images

= 15.1NVD