Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-1735

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

Published

2025-07-13T23:15:22.940

Last Modified

2025-11-04T22:16:06.457

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-89
    CWE-476
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application php php < 8.1.33 Yes
Application php php < 8.2.29 Yes
Application php php < 8.3.23 Yes
Application php php < 8.4.10 Yes
References