Repository Issue Activity (beta)

#22554 Use-After-Free in DOMXPath custom-function path

#22621 UAF via XSLTProcessor::registerPHPFunctions()

#22618 ext/uri: RFC 3986 IPv6 handling is inconsistent

#22553 Broken build with system liburiparser

#22549 Assertion failure _zendi_try_convert_scalar_to_number

#21090 The "new" operator should emit TypeErrors on __construct() return values.

#22617 Persistent abstract unix domain sockets resolved to wrong resource

#22616 Allow extensions to hook into `php_child_init()`

#22608 ext/uri: RFC 3986 initial-double-dot path can yield incorrect normalization

#22599 Duplicated properties in serialisation payload

#22583 Return INT value for some disk_* operations

#22602 integer overflow gregoriantojd ext/calendar/gregor.c

#22176 Memory leak in ZipArchive when registerCancelCallback is used with a reference-returning function during shutdown

#22369 wrong path succeeds in stream_context_set_options

#22587 Fatal errors for property hooks in combination with pipes

#22404 Test for bug 62900 can make use of TEST_PHP vars

#22585 SEGV Zend/zend_variables.h member access within null pointer

#22516 zend_alloc bin 0 may leak

#22531 Observed worker state inconsistencies under Apache mod_proxy_fcgi with connection reuse (PHP-FPM 8.5.6)

#22570 Stack overflow when serializing a deeply nested Dom\XMLDocument

#22522 ASan double-free DOM XML php_libxml_decrement_doc_ref_directly

#22567 Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation

#21705 `ZipArchive::getFromIndex()` ignores `ZipArchive::FL_UNCHANGED` for deleted entries

#22559 PHP 8.4–8.6 tracing-JIT miscompilation: `~` high bits leak into a masked OR stored to a typed `int`

#15859 cURL - Send 2+ files using the same parameter name ("file[]")