0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
| Supplier | Product | Version (see Status) | Status CVE-2026-109618 | Status CVE-2026-109619 | Notes | Links |
|---|---|---|---|---|---|---|
| Ladybird Web Solution / Faveo | Faveo Helpdesk Community Edition | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. Edition-labelled vendor installation instructions explicitly provision PHP for the Community helpdesk. |
source 1 source 2 |
|
| Laminas Project / Linux Foundation | Laminas MVC | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The released package declares PHP and MVC application dependencies; official Laminas documentation labels MVC security-only maintenance. |
source 1 source 2 |
|
| Laminas Project / Mezzio | Mezzio | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. Publisher metadata identifies a PHP PSR-15 middleware framework with router, template and request-handler packages. |
source 1 source 2 |
|
| Lando project | Lando PHP service plugin images | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown Lando documents an optional PHP service and custom images; its legacy warning says EOL families can run but should be considered deprecated. |
source | |
| Laragon project | Laragon Full Windows development bundle | Laragon 8.8.0 with bundled PHP 8.3.36 selected | Fix | Fix | CVE assessment: Laragon's 2026-10-22 release updates its PHP 8.3 bundle to 8.3.36 for critical security fixes. PHP upstream confirms this version fixes both CVEs. Other added or selected PHP branches are not covered by this release evidence. Update Laragon and select its fixed PHP 8.3 runtime; separately update any other installed or per-project PHP runtime. |
source 1 source 2 source 3 |
| Laravel | Laravel 13 framework | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; PHP upstream confirms this runtime scope and Calif confirmed representative application-level pre-auth RCE. The remediation is the PHP runtime upgrade. Laravel 13 deployment documentation identifies server PHP requirements and web/CLI deployment operations. The separately versioned 12 guide has a lower PHP floor. |
source 1 source 2 |
|
| Laravel | Laravel Cloud PHP runtime option | Laravel Cloud managed runtimes: PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 | Fix | Fix | CVE assessment: Laravel's official response, updated 21 October 23:26 UTC, confirms every running Cloud application was patched in place and new deployments use fixed base images. No customer redeploy was needed. This finding is limited to Laravel Cloud, not arbitrary self-hosted Laravel applications. Vendor-confirmed fix available in the listed PHP runtime/build scope; see the CVE assessment for exclusions and deployment requirements. |
source 1 source 2 source 3 source 4 |
| Laravel | Laravel Vapor core PHP invocation package | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown The published package manifest identifies Vapor's PHP invocation handlers and runtime dependencies. |
source | |
| Laravel | Laravel Vapor PHP Docker base image family | Updated Vapor PHP 8.2+ Docker runtimes from the October 2026 security rollout | Fix | Fix | CVE assessment: Laravel confirms patched Vapor runtimes are live and explicitly requires a new deployment for Docker/custom runtimes. The official base-image repository also merges the PHP 8.2.35 pin. PHP 8.0/8.1 are excluded; existing deployments do not update automatically. Use the updated PHP 8.2+ base image and create a new deployment; a redeploy of the existing Docker image is insufficient. |
source 1 source 2 source 3 source 4 |
| Laravel; AWS infrastructure | Laravel Vapor PHP serverless hosting configuration | Laravel Vapor native PHP 8.2+ patched runtimes; PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 | Fix | Fix | CVE assessment: Laravel confirms the patched Vapor runtimes are live. Native PHP 8.2+ applications must be redeployed; custom/Docker runtime applications need a new build/deployment. PHP 8.0 and 8.1 are explicitly excluded from the available patch confirmation and must be upgraded. Vendor-confirmed fix available in the listed PHP runtime/build scope; see the CVE assessment for exclusions and deployment requirements. |
source 1 source 2 source 3 |
| LDAP Account Manager project | LDAP Account Manager | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The manual requires a PHP web environment and separates optional Perl lamdaemon from the PHP application. |
source | |
| Leantime project | Leantime | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The root runtime manifest explicitly requires PHP and modules, including LDAP and process-control modules, separately from development tooling. |
source 1 source 2 |
|
| Lexmark | Lexmark Accessibility Solution | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark AccuRead Automate | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Barcode Discovery | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Card Authentication | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Card Copy | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Cloud Connector | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Cloud Print Management apps | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Cloud Scan | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Cloud Services | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Cloud Solution Center | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Customer Support | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark CX833, CX950, CX951, CX961, CX962, CX963, CS963 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Lexmark | Lexmark Data Collection Manager (LDCM) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Device Quota | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Display Customization | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Document Distributor | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Downtime Assistant | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark eSF/SDK | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Keyboard Reader Driver | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Markvision Enterprise | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark MX953 | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Lexmark | Lexmark Omnikey Reader Driver | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark OnBase Connector | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Optra Compute | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Optra & Edge Solutions in the vendor bulletin. |
source |
| Lexmark | Lexmark Optra Vision | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Optra & Edge Solutions in the vendor bulletin. |
source |
| Lexmark | Lexmark Print | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Print App (Android Play Store) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Lexmark | Lexmark Print App (iOS App Store) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Lexmark | Lexmark Print Drivers | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Drivers in the vendor bulletin. |
source |
| Lexmark | Lexmark Print Management | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Print Management in the vendor bulletin. |
source |
| Lexmark | Lexmark Print Plugin (Android Play Store) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Mobile in the vendor bulletin. |
source |
| Lexmark | Lexmark Printer Configuration Agent | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Printer Firmware | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Printers & Multifunction Printers in the vendor bulletin. |
source |
| Lexmark | Lexmark Remote Management Extension (LRME) | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Lexmark Software & Cloud in the vendor bulletin. |
source |
| Lexmark | Lexmark Scan Center | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Scan Center Premium | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Scan to FileBound | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Scan to RightFax XML | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Scan to SharePoint Online | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Secure Document Monitor | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Shortcut Center | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Solutions Composer | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Worldwide eSF Apps in the vendor bulletin. |
source |
| Lexmark | Lexmark Translation Assistant | Most current release evaluated in XRX26-016 v4 (2026-10-28); version not specified | Not vuln | Not vuln | CVE assessment: Xerox XRX26-016 v4 (2026-10-28) explicitly lists this product/model scope as not impacted by both PHP2Shell CVEs; exact release numbers are not supplied. Listed under Apps - Lexmark Cloud eSF Apps in the vendor bulletin. |
source |
| LibreNMS project | LibreNMS | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The root manifest requires PHP and runtime modules; the guide separately configures PHP-FPM/CLI and Python/native helper packages. |
source 1 source 2 |
|
| libsmbclient-php project | SMBClient native PHP Samba binding | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown The selected release provides PHP functions and smb streams using Samba's libsmbclient. |
source 1 source 2 |
|
| libvirt-php contributors / Unraid distribution | Unraid libvirt-php management binding | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown Unraid independently lists libvirt-php alongside its matching PHP package. |
source 1 source 2 |
|
| Lime Technology / Unraid | Unraid PHP management runtime distribution | Unraid OS 7.3.4 (PHP 8.4.27) | Fix | Fix | CVE assessment: Unraid's official administrator announcement confirms OS 7.3.4 includes PHP 8.4.27 fixing both CVEs. This does not cover separately maintained Docker or VM runtimes or the libvirt-php binding. Update Unraid OS to 7.3.4; assess independently maintained application runtimes separately. |
source 1 source 2 source 3 |
| LimeSurvey GmbH / LimeSurvey project | LimeSurvey Community Edition | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The CE installation manual binds PHP bands to major LS versions and separates conditional survey, mail, directory and archive features. |
source 1 source 2 |
|
| LiveCodes project | LiveCodes PHP (Uniter) browser mode | Investigation | Investigation | CVE assessment: Independent engine; no automatic inheritance The php language mode uses Uniter in the browser and lists version 2.18.0. |
source | |
| LiveCodes project | LiveCodes PHP (Wasm) browser mode | Investigation | Investigation | CVE assessment: PHP Wasm scope; CVE match unknown The Wasm mode names its php-wasm and PHP versions separately. |
source | |
| Lunar project | Lunar administration panel | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown Publisher package metadata identifies an admin panel and requires its exact commerce-core and Filament component versions. |
source | |
| Lunar project | Lunar commerce core | Investigation | Investigation | CVE assessment: PHP relationship confirmed; CVE match unknown Publisher metadata declares PHP, three direct extensions and Laravel for the headless commerce core. |
source |