Skip to content
OpenAdvisories

Package · Ubuntu

phpunit

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.8
    CVE-2026-41570

    PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

    PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes (used for isolated/PHPT test execution) as -d name=value command-line arguments without neutralizing INI metacharacters. Because PHP's…

    sebastianbergmann phpunit phpunit/phpunit phpunit Ubuntu Packagist
  • High 7.8
    CVE-2026-24765

    PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

    PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the `clean…

    sebastianbergmann phpunit phpunit/phpunit phpunit Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022