sebastianbergmann phpunit
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-119193 | >= 13.4.0, < 13.4.4 | PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling | MEDIUM 5.4 | |||
| CVE-2026-41570 | = 12.5.21 ; = 13.1.5 | PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes | HIGH 7.8 | 0.2 % | ||
| CVE-2026-24765 | < 8.5.52 ; >= 9.0.0, < 9.6.33 ; >= 10.0.0, < 10.5.62 ; … | PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling | HIGH 7.8 | 0.4 % |