Skip to content
OpenAdvisories

Vendor

bobthecow

2 known vulnerabilities.

Products

psysh 1 bobthecow/mustache.php 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-25129

    PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

    PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a …

    bobthecow psysh psy/psysh Packagist
  • Medium 5.3
    CVE-2022-0323

    Improper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php

    Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

    bobthecow bobthecow/mustache.php moodle mustache/mustache Ubuntu Packagist