VULNERABILITY INTELLIGENCE

CVE-2024-57071

CVSS score7.5 HIGH

EPSS probability0.44%

CISA KEVNot currently listed

Published2025-02-05

Last modified2026-06-17

Description

A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.