CVE-2026-128017

FrankenPHP versions prior to 1.13.4 are vulnerable to a double free vulnerability in worker mode . The issue occurs when a worker script ends its loop following a non-form POST request, causing the system to free SG(request_info).content_type_dup twice. Unauthenticated attackers can exploit this ...