{"advisories":["ASA-202610-2","ASA-202610-2"],"affected":"8.1.13-1","cves":["CVE-2026-109619","CVE-2026-109618"],"cvss":0.0,"database_specific":{"severity":"Critical"},"fixed":"8.3.36-1","id":"AVG-2910","packages":["php-legacy"],"source":"archlinux","status":"Fixed","title":"php-legacy: arbitrary code execution","type":"arbitrary code execution","url":"https://security.archlinux.org/AVG-2910"}