Skip to content
OpenAdvisories

Product · php

frankenphp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-85733

    FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

    FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo(). A derived image that does not overwrite this placeholder serves the di…

    php frankenphp