CVE-2026-128016 FrankenPHP before 1.13.4 Use-After-Free of SplTempFileObject Streams in Worker Mode

FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of SplTempFileObject or SplFileObject on php://temp instances surviving across requests. Remote clients can send requests reaching code that uses such persisted objects, causing reads of...