Skip to content

Setup PHP: Command Injection in Repository-Derived PHP Version Resolution

Moderate severity GitHub Reviewed Published May 14, 2026 in shivammathur/setup-php • Updated May 20, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts