Threats tagged 'ghsa-3pr5-hpcj-9r5h'

FrankenPHP versions from 1.5.0 up to but not including 1.13.0 have an environment sandbox vulnerability where putenv modifies the process-wide OS environment. This causes leakage of environment variables, including secrets like database passwords, across concurrent requests when child processes are spawned with default environments.