Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/13 7:24 p.m.5 views

CVE-2026-42552 Flight: Sensitive information disclosure via default error handler in flightphp/core

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::error writes the full exception message, exception code, and stack trace including absolute filesystem paths directly into the HTTP 500 response, with no debug gating. Production deployments leak...

7.5CVSS5.9AI score0.00335EPSS
SaveExploits0References3
Rows per page
Query Builder