CVE-2026-128016

FrankenPHP versions before 1.13.4 are vulnerable to a use-after-free condition when operating in worker mode . The issue occurs because internal streams of SplTempFileObject or SplFileObject on php://temp instances persist across requests and are subsequently freed. A remote client can trigger a ...