Vulnerability Database · OSS-Fuzz · php · Version
php php-8.0.0beta3
php-8.0.0beta3 is affected by 9 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 6 Medium 1 Low 0 Unrated 2
-
Database updated 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
php php-8.0.0beta3 vulnerabilities
9 vulnerabilities cover php php-8.0.0beta3. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Heap-use-after-free in zend_jit_trace_execute in php | N/A high | No fix published | 31 Oct 2023 |
| Segv on unknown address in cleanup_live_vars in php | N/A unrated | No fix published | 27 Oct 2023 |
| Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue in php | N/A medium | No fix published | 13 Jul 2022 |
| Segv on unknown address in i_zval_ptr_dtor | N/A unrated | No fix published | 12 Mar 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 21 Feb 2022 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 29 Dec 2021 |
| Heap-use-after-free vulnerability in php | N/A high | No fix published | 25 Dec 2021 |
| Heap-use-after-free in zend_hash_iterator_pos_ex in PHP | N/A high | 5875bf754ed4fc64a6f0b7d62734d2a816c51017 | 28 Feb 2021 |
| Heap-use-after-free vulnerability in zend_gc_delref in php | N/A high | 3c53732332c4b9d3904eec0d1c42f0d4d4bf65c6 | 12 Sep 2020 |
Looking for another version, or everything Vulert holds for php?
Questions
About php php-8.0.0beta3
Is php php-8.0.0beta3 vulnerable?
Yes. 9 vulnerabilities in the Vulert database cover php php-8.0.0beta3: 0 critical, 6 high, 1 medium and 0 low, plus 2 not yet rated. Each entry above names the fixed version to move to.
How do I monitor php for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.