Skip to content
PHP frankenphp
-
CVE-2026-122233
Low 3.7
FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode
0.2%
-
CVE-2026-85733
Medium 5.3
FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables
0.2%
-
CVE-2026-82416
High 7.7
FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module
0.3%
-
CVE-2026-45062
High 8.1
FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files
0.7%
-
CVE-2026-24895
High 8.9
FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files
0.7%
-
CVE-2026-24894
High 8.7
FrankenPHP leaks session data between requests in worker mode
0.5%