Merge pull request #7430 from github/sebastianbergmann-GHSA-qrr6-mg7r-m243

advisory-database[bot] · web-flow · commit 715dcaec41a2 · 2026-04-20T18:58:44.000Z
diff --git a/advisories/github-reviewed/2026/04/GHSA-qrr6-mg7r-m243/GHSA-qrr6-mg7r-m243.json b/advisories/github-reviewed/2026/04/GHSA-qrr6-mg7r-m243/GHSA-qrr6-mg7r-m243.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qrr6-mg7r-m243",
-  "modified": "2026-04-18T00:59:28Z",
+  "modified": "2026-04-18T00:59:32Z",
   "published": "2026-04-18T00:59:28Z",
   "aliases": [],
   "summary": "PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes",
@@ -23,17 +23,14 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "12.5.21"
             },
             {
               "fixed": "12.5.22"
             }
           ]
         }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "<= 12.5.21"
-      }
+      ]
     },
     {
       "package": {
@@ -45,17 +42,14 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "13.0.0"
+              "introduced": "13.1.5"
             },
             {
               "fixed": "13.1.6"
             }
           ]
         }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "<= 13.1.5"
-      }
+      ]
     }
   ],
   "references": [

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"schema_version": "1.4.0",`
`3`	`3`	`"id": "GHSA-qrr6-mg7r-m243",`
`4`		`- "modified": "2026-04-18T00:59:28Z",`
	`4`	`+ "modified": "2026-04-18T00:59:32Z",`
`5`	`5`	`"published": "2026-04-18T00:59:28Z",`
`6`	`6`	`"aliases": [],`
`7`	`7`	`"summary": "PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes",`
`@@ -23,17 +23,14 @@`
`23`	`23`	`"type": "ECOSYSTEM",`
`24`	`24`	`"events": [`
`25`	`25`	`{`
`26`		`- "introduced": "0"`
	`26`	`+ "introduced": "12.5.21"`
`27`	`27`	`},`
`28`	`28`	`{`
`29`	`29`	`"fixed": "12.5.22"`
`30`	`30`	`}`
`31`	`31`	`]`
`32`	`32`	`}`
`33`		`- ],`
`34`		`- "database_specific": {`
`35`		`- "last_known_affected_version_range": "<= 12.5.21"`
`36`		`- }`
	`33`	`+ ]`
`37`	`34`	`},`
`38`	`35`	`{`
`39`	`36`	`"package": {`
`@@ -45,17 +42,14 @@`
`45`	`42`	`"type": "ECOSYSTEM",`
`46`	`43`	`"events": [`
`47`	`44`	`{`
`48`		`- "introduced": "13.0.0"`
	`45`	`+ "introduced": "13.1.5"`
`49`	`46`	`},`
`50`	`47`	`{`
`51`	`48`	`"fixed": "13.1.6"`
`52`	`49`	`}`
`53`	`50`	`]`
`54`	`51`	`}`
`55`		`- ],`
`56`		`- "database_specific": {`
`57`		`- "last_known_affected_version_range": "<= 13.1.5"`
`58`		`- }`
	`52`	`+ ]`
`59`	`53`	`}`
`60`	`54`	`],`
`61`	`55`	`"references": [`