CVE-2026-128026

FrankenPHP versions 1.5.0 before 1.13.0 are vulnerable to a cross-request environment leakage due to an incomplete environment sandbox. The putenv function writes directly to the process-wide OS environment via os.Setenv, causing environment variables to persist across concurrent requests. An att...