Executive brief
FrankenPHP has delayed propagation of security fixes in upstream base images
Affected products
- Go github.com/dunglas/frankenphp
Junglewise Threat Intelligence
FrankenPHP has delayed propagation of security fixes in upstream base images
Severity: low · CVSS 3.1 · Published 2026-02-05
Technologies: github.com/dunglas/frankenphp (Go). Vendors: Go.
Related threats
- FrankenPHP remote code execution via unsafe Unicode handling in CGI path splitting
- GO-2026-4442 - FrankenPHP has delayed propagation of security fixes in upstream base images in github.com/dunglas/frankenphp
- GO-2026-4486 - FrankenPHP's unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FrankenPHP in gith
- GO-2026-4489 - FrankenPHP leaks session data between requests in worker mode in github.com/dunglas/frankenphp