Skip to content
OpenAdvisories

Product · PHPCSStandards

PHP_CodeSniffer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-67434

    PHP_CodeSniffer gitblame report command injection via crafted filename

    PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame repo…

    PHPCSStandards PHP_CodeSniffer squizlabs/php_codesniffer Packagist