Skip to content
OpenAdvisories

Vendor

slimphp

2 known vulnerabilities.

Products

Slim-Psr7 1 Slim 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-48157

    Slim has Reflected XSS in the HtmlErrorRenderer

    Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle() and/or setDescription() to include untrusted/request-derived data in the error title o…

    slimphp Slim slim/slim Packagist
  • Medium 6.5
    CVE-2023-30536

    Insecure header validation in slim/psr7

    slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many server…

    slimphp Slim-Psr7 slim/psr7 php-slim-psr7 Debian Packagist