CVE-2025-1735

score

<0.1

cvss

5.9

epss

1.0%

published

2025-07-13

kev added

—

first seen

2026-10-21

PHP 8.1.* < 8.1.33, 8.2.* < 8.2.29, 8.3.* < 8.3.23, and 8.4.* contain a denial of service caused by pgsql and pdo_pgsql escaping functions not checking errors from underlying quoting functions, letting attackers cause crashes if Postgres rejects invalid strings, exploit requires crafted input.