What’s Vulnerable › Products

shivammathur setup-php vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your shivammathur setup-php version is affected

Latest shivammathur setup-php vulnerabilities

• CVE-2026-46420 — setup-php: Command Injection in Repository-Derived PHP Version Resolution (CVSS 9.8)