Known vulnerabilities in Facebook HHVM
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-36937 | HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension | 9.8 Critical | May 10, 2023 |
| CVE-2018-6334 | Multipart-file uploads call variables to be improperly registered in the global scope | 9.8 Critical | Dec 31, 2018 |