Skip to main content

Vendor/product archive

php / frankenphp CVEs

Beta · best-effort

2 CVEs tagged to php / frankenphp0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2026-24895

Published Feb 12, 2026

FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic c…

CVSS 8.9 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2026-24894

Published Feb 12, 2026

FrankenPHP is a modern application server for PHP. Prior to 1.11.2, when running FrankenPHP in worker mode, the $_SESSION superglobal is not correctly reset between requests. This…

CVSS 8.7 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1