Advisories · Technology

frankenphp.

Every CVE that names frankenphp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-122233 CVE record

CVSS 6.3 Medium

FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode
- frankenphp
- CWE-488
Not analysed yet 4 Nov 2026
CVE-2026-85733 CVE record

CVSS 5.3 Medium

FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables
- frankenphp
- Information disclosure
Not analysed yet 13 Oct 2026