php frankenphp vulnerabilities
6 published CVEs name php frankenphp among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-122233
FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode
php · frankenphp
Medium6.3 - CVE-2026-85733
FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables
php · frankenphp
Medium5.3 - CVE-2026-82416
FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module
php · frankenphp
High7.7 - CVE-2026-45062
FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files
php · frankenphp
High8.1 - CVE-2026-24895
FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files
php · frankenphp
High8.9 - CVE-2026-24894
FrankenPHP leaks session data between requests in worker mode
php · frankenphp
High8.7