Hush Framework vulnerabilities

1 known vulnerability in Hush Framework from Jameschz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Hush Framework: Improper Neutralization of HTTP Headers for Scripting Syntax

  CVE-2025-13434Nov 20, 2025Jameschz

  A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $_SERVER['HOST'] causes improper neu