CVE-2026-128020

Versions of FrankenPHP before 1.13.2 are vulnerable to a Denial of Service due to an uncontrolled recursion vulnerability in the PHP-to-Go array converter . The converter fails to detect circular references in PHP arrays; providing a self-referential array via frankenphp_log() or returning one fr...