pear pearweb vulnerabilities

Newest CVEs

• CVE-2026-25241

  PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint

  pear · pearweb

  Critical9.3
• CVE-2026-25240

  PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter

  pear · pearweb

  Medium6.9
• CVE-2026-25239

  PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename

  pear · pearweb

  High8.2
• CVE-2026-25238

  PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

  pear · pearweb

  Critical9.2
• CVE-2026-25237

  PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails

  pear · pearweb

  Critical9.2
• CVE-2026-25236

  PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

  pear · pearweb

  Medium6.9
• CVE-2026-25235

  PEAR Has a Predictable Verification Hash in Election Account Requests

  pear · pearweb

  High8.2
• CVE-2026-25234

  PEAR is Vulnerable to SQL Injection in Category Deletion

  pear · pearweb

  Medium5.3
• CVE-2026-25233

  PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug

  pear · pearweb

  High7.1