PHPCSUtils vulnerabilities

1 known vulnerability in PHPCSUtils from PHPCSStandards. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  PHPCSUtils: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2026-65954Oct 12, 2026PHPCSStandards

  PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), allowing callb