Skip to content
OpenAdvisories

Package · Debian

phpunit

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.4
    CVE-2026-119193

    PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

    PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sys_get_temp_dir() and …

    sebastianbergmann phpunit phpunit/phpunit phpunit Debian Packagist
  • High 7.8
    CVE-2026-24765

    PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

    PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the `clean…

    sebastianbergmann phpunit phpunit/phpunit phpunit Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022