Lucene search
+L

12 matches found

osv_cve
osv_cve
•added 2026/05/13 7:24 p.m.•28 views

CVE-2026-42552 Flight: Sensitive information disclosure via default error handler in flightphp/core

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::error writes the full exception message, exception code, and stack trace including absolute filesystem paths directly into the HTTP 500 response, with no debug gating. Production deployments leak...

7.5CVSS5.7AI score
SaveExploits0References3
Rows per page
Query Builder