Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-21704 — MEDIUM severity vulnerability | Release Alert

CVE-2021-21704

5

MEDIUMCVSS v3

Published

October 4, 2021

CVSS v2

4.3 MEDIUM

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.

NPM

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD

NPMLezer-based PHP grammar

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD

lezer-parser/php

GitHub

More on this CVE

NVD↗GitHub Advisory↗

PHP grammar for Lezer.

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD

Crates.ioRust bindings for the PHP runtime

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD

NPMAllows you to run PHP code in Node.js in various ways.

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD

Python Package IndexHandle some of the strange standards in PHP projects

>= 8.0.0, < 8.0.8, >= 7.4.0, < 7.4.21, >= 7.3.0, < 7.3.29NVD