Threats tagged 'ghsa-f45r-jvx9-jfvx'

FrankenPHP versions prior to 1.13.4 have a use-after-free vulnerability in worker mode involving internal streams of SplTempFileObject or SplFileObject on php://temp instances that persist across requests. This flaw allows remote clients to trigger reads of freed memory, potentially leaking garbage data or causing process crashes.