Threats tagged 'ghsa-67qw-5wvh-x639'

FrankenPHP versions prior to 1.13.4 have an information disclosure vulnerability in worker mode where environment variables from one request can leak into subsequent requests on the same PHP thread. This allows attackers to access sensitive per-request environment data such as routing, tenant, or authorization values via getenv() or $_SERVER, potentially causing unauthorized application behavior.