Skip to content
OpenAdvisories

Package · Packagist

slim/slim

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2026-48157

    Slim has Reflected XSS in the HtmlErrorRenderer

    Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle() and/or setDescription() to include untrusted/request-derived data in the error title o…

    slimphp Slim slim/slim Packagist
  • High —
    CVE-2015-2171

    Slim vulnerable to PHP object injection

    Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.

    slim/slim Packagist