pear — Vulnerabilities & Security Advisories 9

PEAR is a PHP extension and application distribution system that provides reusable components for web development. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and insecure deserialization. Notable incidents include multiple RCE flaws in package management systems and a 2017 supply chain attack where malicious code was introduced through the PEAR installer. Despite these issues, PEAR remains widely used in legacy PHP environments, requiring careful dependency management and regular updates to mitigate risks associated with its 9 documented CVEs.