Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2024-8929 — MEDIUM severity vulnerability | Release Alert

CVE-2024-8929

5.8

MEDIUMCVSS v3

Published

November 22, 2024

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

GitHubThe PHP Interpreter

NVD

NPM

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

NPMLezer-based PHP grammar

More on this CVE

NVD↗GitHub Advisory↗

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

lezer-parser/php

GitHubPHP grammar for Lezer.

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

Crates.ioRust bindings for the PHP runtime

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

NPMAllows you to run PHP code in Node.js in various ways.

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

Python Package IndexHandle some of the strange standards in PHP projects

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD

Docker HubWhile designed for web development, the PHP scripting language also provides general-purpose use.

>= 8.3.0, < 8.3.14, >= 8.2.0, < 8.2.26, >= 8.1.0, < 8.1.31NVD