early signals oss-security infra

PHP Informational advisory: Session upload progress (CVE-2026-115560)

// summary

PHP published an informational security advisory for CVE-2026-115560, which affects session upload progress functionality.

// from the source

Posted by Alan Coopersmith on Oct 23 https://www.php.net/archive/2026.php#2026-10-23-1 advises:
Read at seclists.org ↗ More from oss-security

# more from oss-security

  1. oss-security infra

    Ruby Regexp compilation fixes related to GitLab's CVE's

    seclists.org
  2. oss-security

    CVE-2026-115748: Apache Vysper: Authorization bypass

    seclists.org
  3. oss-security

    CVE-2026-115721: Apache Vysper: Unbounded allocation

    seclists.org
  4. oss-security

    CVE-2025-60497: NULL pointer dereference in GPAC/MP4Box GetESD via crafted MP4 input

    seclists.org
  5. oss-security

    CVE-2025-60494: invalid memory read in GPAC/MP4Box gf_props_equal_internal via crafted MP4 input

    seclists.org