{"advisories":["ASA-202610-1","ASA-202610-1"],"affected":"5.3.0-1","cves":["CVE-2026-109619","CVE-2026-109618"],"cvss":0.0,"database_specific":{"severity":"Critical"},"fixed":"8.5.12-1","id":"AVG-2909","packages":["php"],"source":"archlinux","status":"Fixed","title":"php: arbitrary code execution","type":"arbitrary code execution","url":"https://security.archlinux.org/AVG-2909"}