EUVD-2026-125084

FrankenPHP before 1.13.4 contains a denial of service vulnerability in worker mode where frankenphphandlerequest returns false without finishing the dequeued request after a fatal error during request startup. Attackers who trigger startup fatal errors against worker scripts that keep calling...

CVE-2026-128018

FrankenPHP versions before 1.13.4 are vulnerable to a Denial of Service (DoS) in worker mode . The root cause is that the frankenphp_handle_request() function returns false without completing the dequeued request if a fatal error occurs during request startup. This allows attackers to trigger sta...