Skip to content
OpenAdvisories

Vendor

PHPCSStandards

2 known vulnerabilities.

Products

PHP_CodeSniffer 1 PHPCSUtils 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-65954

    PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

    PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), allowing call…

    PHPCSStandards PHPCSUtils phpcsstandards/phpcsutils Packagist
  • High 7.3
    CVE-2026-67434

    PHP_CodeSniffer gitblame report command injection via crafted filename

    PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame repo…

    PHPCSStandards PHP_CodeSniffer squizlabs/php_codesniffer Packagist