Disclosure summary
What's Changed Important ⭐ These below fix CVE-2026-33691: fix(933111): prevent whitespace padding bypass in PHP double-extension upload by @fzipi in #4547 fix(933110): prevent whi
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
coreruleset/coreruleset releases · RSS-d15cf6fbbe9c07dabec8fbf0a5a919bd838
Open original source · Updated Mar 29, 2026
v3.3.9
CVE mention in publisher metadata; check the original affected versions.
coreruleset/coreruleset releases · RSS-1686cdf78b1e669a4abdd1fde2ba6f9c368
Open original source · Updated Mar 28, 2026
v4.25.0 (LTS)
CVE mention in publisher metadata; check the original affected versions.
Original records & references
- NIST NVD record
- CVE Program record
- github.com — Publisher advisory
PUBLISHED 2026-03-28T18:19:55-04:00
MODIFIED 2026-03-28T18:19:55-04:00
INGESTED 2026-10-08T12:30:27-04:00