In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*" ] }