PH
Product
Phpunit
by Phpunit Project · last CVE May 8, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch

Add Phpunit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41570
7.8
0%
May 8
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
Affected: 12.5.21; 13.1.5
CVE-2026-24765
7.8
0%
Jan 27
PHPUnit is a testing framework for PHP
Affected: before 8.5.52; 9.0.0 before 9.6.33; 10.0.0 before 10.5.62; 11.0.0 before 11.5.50; 12.0.0 before 12.5.8
Showing 2