php frankenphp vulnerabilities

Newest CVEs

• CVE-2026-122233

  FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode

  php · frankenphp

  Medium6.3
• CVE-2026-85733

  FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

  php · frankenphp

  Medium5.3
• CVE-2026-82416

  FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

  php · frankenphp

  High7.7
• CVE-2026-45062

  FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files

  php · frankenphp

  High8.1
• CVE-2026-24895

  FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files

  php · frankenphp

  High8.9
• CVE-2026-24894

  FrankenPHP leaks session data between requests in worker mode

  php · frankenphp

  High8.7