Threats tagged 'ghsa-g6wj-cr3g-5frq'

FrankenPHP versions prior to 1.13.2 have an information disclosure vulnerability where libxml errors from earlier client requests are not cleared before processing later requests. This allows attackers sending requests to the same worker thread to access libxml error information from other clients, potentially revealing parsed document fragments and server filesystem paths.