PHPCSStandards vulnerabilities
We track 2 vulnerabilities in PHPCSStandards products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest PHPCSStandards vulnerabilities
- 8.6 High severity
PHPCSUtils: Improper Neutralization of Directives in Dynamically Evaluated Code
PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), allowing callb
- 7.3 High severity
PHP_CodeSniffer: Improper Neutralization of Special Elements used in an OS Command
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame repor