All products

github.com/dunglas/frankenphp

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleCVE-2026-82416 · GHSA-V3PH-CGQH-R8P5Version ranges need review. github.com/dunglas/frankenphp Go High Fix reported
FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP FilesCVE-2026-45062 · GHSA-3G8V-8R37-CGJMVersion ranges need review. github.com/dunglas/frankenphp Go High Fix reported
FrankenPHP's unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FrankenPHPCVE-2026-24895 · GHSA-G966-83W7-6W38Version ranges need review. github.com/dunglas/frankenphp Go High Fix reported
FrankenPHP has delayed propagation of security fixes in upstream base imagesGHSA-X9P2-77V6-6VHF · GO-2026-4442Version ranges need review. github.com/dunglas/frankenphp Go Critical Fix reported
FrankenPHP leaks session data between requests in worker modeCVE-2026-24894 · GHSA-R3XH-3R3W-47GPVersion ranges need review. github.com/dunglas/frankenphp Go High Fix reported