PT-2026-42923

Name of the Vulnerable Software and Affected Versions Slim versions 4.4.0 through 4.15 Description Reflected Cross-Site Scripting XSS occurs in the HtmlErrorRenderer when an application uses the setTitle and/or setDescription functions of HttpException to include untrusted or request-derived data...

PT-2026-42922

Letss go 2 new cve's added to the list!!! - CVE-2026-46626 symfony31k⭐️ - CVE-2026-48157 slimphp12k⭐️...

XML External Entity (XXE) Injection

slimphp is vulnerable to XML External Entity XXE Injection attacks. The library does not restrict external entities from being arbitrary loaded to when parsing XML files...