Threats tagged 'ghsa-2v43-gp2p-9228'

FrankenPHP versions before 1.13.4 have a use-after-free vulnerability triggered by calling putenv() during request shutdown. This flaw causes a dangling pointer to a freed environment table, which can lead to process crashes on subsequent getenv() calls or leakage of environment values from previous requests.