Report: - PHPUnit: Argument injection via newline in PHP INI values forwarded to child pro... CVE-2026-41570

Report: - PHPUnit: Argument injection via newline in PHP INI values forwarded to child pro... CVE-2026-41570

CVE ID :CVE-2026-41570 Published : May 8, 2026, 2:33 p.m. | 54 minutes ago Description :PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes (used for isolated/PHPT test execution) as -d name=value command-line arguments without neutralizing INI metacharacters. Because PHP's INI parser interprets

CVE Details

Published
May 8, 2026
Affected Product: PHP