Threats tagged 'ghsa-3wfj-qwvc-xxr4'

FrankenPHP versions prior to 1.13.2 have an uncontrolled recursion vulnerability in the PHP-to-Go array converter. This flaw occurs because the converter does not detect circular references in PHP arrays. When a self-referential array is passed to frankenphp_log() or returned from a worker callback, it causes a fatal Go stack overflow that terminates the entire server process.