Skip to content
OpenAdvisories

Vendor

php

9 known vulnerabilities.

Products

frankenphp 6 php 3 php-src 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-85733

    FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

    FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo(). A derived image that does not overwrite this placeholder serves the di…

    php frankenphp
  • Medium 5.6
    CVE-2026-14355

    ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD

    In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation …

    php php php5 php7.2 Debian Ubuntu Alpine