Flightphp

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-42552

    Flight: Sensitive information disclosure via default error handler in flightphp/core

    Last Modified: May 15, 2026
    Published: May 13, 2026

    CVE-2026-42551

    Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-42550

    Flight: SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-42549

    Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root

    Last Modified: May 14, 2026
    Published: May 13, 2026

    CVE-2026-42548

    Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp()

    Last Modified: May 14, 2026
    Published: May 13, 2026
    Items Per Page