psysh vulnerabilities

1 known vulnerability in psysh from Bobthecow. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  psysh: Uncontrolled Search Path Element

  CVE-2026-25129Jan 30, 2026Bobthecow

  PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a d