A flaw was found in PHP in the way the function parse_url() returns an erroneous host, which would be valid for `FILTER_VALIDATE_URL`. Reference: https://bugs.php.net/bug.php?id=77423 CREATE(Triage):(User=admin) [CVE-2020-7071|https://nvd.nist.gov/vuln/detail/CVE-2020-7071]
