Skip to content

FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files

High severity GitHub Reviewed Published May 15, 2026 in php/frankenphp • Updated Jun 10, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts