Skip to content

phar: reject extractTo() when destination parent escapes via symlink#21808

Open
iliaal wants to merge 1 commit intophp:PHP-8.4from
iliaal:fix/phar-extractto-symlink-traversal
Open

phar: reject extractTo() when destination parent escapes via symlink#21808
iliaal wants to merge 1 commit intophp:PHP-8.4from
iliaal:fix/phar-extractto-symlink-traversal

Commits

Commits on Apr 18, 2026