Automatic github actions updates. Changes found @lightswitch05

Author: lightswitch05

docs/rules-v1.json

@@ -1,13 +1,13 @@
 {
-    "lastUpdatedDate": "2025-07-03T02:53:58+0000",
+    "lastUpdatedDate": "2025-07-03T13:38:40+0000",
     "name": "PHP Version Audit",
     "website": "https://github.com/lightswitch05/php-version-audit",
     "licence": "https://github.com/lightswitch05/php-version-audit/blob/master/LICENSE",
     "source": "https://www.github.developerdan.com/php-version-audit/rules-v1.json",
-    "releasesCount": 525,
+    "releasesCount": 527,
     "cveCount": 104,
     "supportVersionsCount": 23,
-    "latestVersion": "8.4.8",
+    "latestVersion": "8.4.10",
     "latestVersions": {
         "4": "4.4.9",
         "4.0": "4.0.6",
@@ -29,12 +29,12 @@
         "7.2": "7.2.34",
         "7.3": "7.3.33",
         "7.4": "7.4.33",
-        "8": "8.4.8",
+        "8": "8.4.10",
         "8.0": "8.0.30",
         "8.1": "8.1.32",
-        "8.2": "8.2.28",
+        "8.2": "8.2.29",
         "8.3": "8.3.22",
-        "8.4": "8.4.8"
+        "8.4": "8.4.10"
     },
     "supportEndDates": {
         "3.0": {
@@ -3305,6 +3305,14 @@
                 "CVE-2025-1861"
             ]
         },
+        "8.2.29": {
+            "releaseDate": "2025-07-03T00:00:00+0000",
+            "patchedCves": [
+                "CVE-2025-1220",
+                "CVE-2025-1735",
+                "CVE-2025-6491"
+            ]
+        },
         "8.3.0": {
             "releaseDate": "2023-11-23T00:00:00+0000",
             "patchedCves": []
@@ -3458,6 +3466,14 @@
         "8.4.8": {
             "releaseDate": "2025-06-05T00:00:00+0000",
             "patchedCves": []
+        },
+        "8.4.10": {
+            "releaseDate": "2025-07-03T00:00:00+0000",
+            "patchedCves": [
+                "CVE-2025-1220",
+                "CVE-2025-1735",
+                "CVE-2025-6491"
+            ]
         }
     },
     "cves": {
@@ -3983,7 +3999,7 @@
             "id": "CVE-2022-31631",
             "baseScore": null,
             "publishedDate": "2025-02-12T22:15:00+0000",
-            "lastModifiedDate": "2025-02-13T16:15:00+0000",
+            "lastModifiedDate": "2025-07-02T21:35:00+0000",
             "description": "In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities."
         },
         "CVE-2022-37454": {
@@ -4109,14 +4125,14 @@
             "id": "CVE-2024-8929",
             "baseScore": null,
             "publishedDate": "2024-11-22T07:15:00+0000",
-            "lastModifiedDate": "2025-01-10T13:15:00+0000",
+            "lastModifiedDate": "2025-07-02T20:11:00+0000",
             "description": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server."
         },
         "CVE-2024-8932": {
             "id": "CVE-2024-8932",
             "baseScore": null,
             "publishedDate": "2024-11-22T06:15:00+0000",
-            "lastModifiedDate": "2025-01-10T13:15:00+0000",
+            "lastModifiedDate": "2025-07-02T20:08:00+0000",
             "description": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write."
         },
         "CVE-2024-9026": {
@@ -4170,23 +4186,23 @@
         },
         "CVE-2025-1734": {
             "id": "CVE-2025-1734",
-            "baseScore": null,
+            "baseScore": 5.3,
             "publishedDate": "2025-03-30T06:15:00+0000",
-            "lastModifiedDate": "2025-05-23T14:15:00+0000",
+            "lastModifiedDate": "2025-07-02T20:13:00+0000",
             "description": "In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers."
         },
         "CVE-2025-1736": {
             "id": "CVE-2025-1736",
-            "baseScore": null,
+            "baseScore": 7.3,
             "publishedDate": "2025-03-30T06:15:00+0000",
-            "lastModifiedDate": "2025-05-23T14:15:00+0000",
+            "lastModifiedDate": "2025-07-02T20:14:00+0000",
             "description": "In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted."
         },
         "CVE-2025-1861": {
             "id": "CVE-2025-1861",
-            "baseScore": null,
+            "baseScore": 9.8,
             "publishedDate": "2025-03-30T06:15:00+0000",
-            "lastModifiedDate": "2025-05-23T14:15:00+0000",
+            "lastModifiedDate": "2025-07-02T20:17:00+0000",
             "description": "In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location."
         }
     }