FrankenPHP v1.12.3 Release: Fixes CVE-2026-45062 Unsafe Unicode CGI Path Split Leading to PHP Execution Bypass

github.com 2026-06-13查看中文 →

Security AdvisoryCVE-2026-45062HighFrankenPHP

Affected:

FrankenPHP v1.11.2
FrankenPHP v1.12.1
FrankenPHP v1.12.2

Fixed in:

v1.12.3

Referenced CVEs: CVE-2026-45062 · 8.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Multi-tenant IDOR Vulnerability Analysis and Fix in Brand/Calendar/Campaign Modules 2026-07-03 SSRF Vulnerability in Eclipse Theia via /services/request-service RPC (CVE-2026-1005) 2026-07-03 Theia Terminal WebSocket Unauthorized Command Execution via Cross-Origin Access (GHSA-78g8-vm3p-97c6) 2026-07-03 Kong Connect MCP Stored Prompt Injection and Credential Exposure (GHSA-7767-3m3w-2p44) 2026-07-03 CISA Advisory ICSA-26-183-03: Unauthenticated Access Vulnerability in Industrial Control Systems 2026-07-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive