EUVD-2026-125087

FrankenPHP before 1.13.4 contains a use-after-free vulnerability that leaves a dangling pointer to a freed environment table when putenv is called during request shutdown. Attackers triggering putenv in shutdown functions, destructors, or session handlers can crash the process on the next getenv...