Skip to content
OpenAdvisories

Package · Packagist

psy/psysh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.7
    CVE-2026-25129

    PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

    PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a …

    bobthecow psysh psy/psysh Packagist