PH
Product
Phpunit
by Phpunit Project · last CVE May 8, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch

Add Phpunit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-9841
In wildKEV
9.8
100%
Jun 27
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring,…
Affected: through 4.8.27; 5.0.0 before 5.6.3
Showing 1