https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:40:56.418686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03584 bdu:2021-03584 2026-10-15T14:40:56.422508+00:00 bdu:2021-03584 https://cve.radiocsirt.org/vuln/cnvd-2019-45388 cnvd-2019-45388 2026-10-15T14:40:56.422539+00:00 cnvd-2019-45388 https://cve.radiocsirt.org/vuln/euvd-2026-57945 EUVD-2026-57945 2026-10-15T14:40:56.422553+00:00 EUVD-2026-57945 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16774 fkie_cve-2019-16774 2026-10-15T14:40:56.422565+00:00

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.

 https://cve.radiocsirt.org/vuln/ghsa-484f-743f-6jx2 GHSA-484f-743f-6jx2 — Object injection in cookie driver in phpfastcache 2026-10-15T14:40:56.422589+00:00

Affected: Packagist: phpfastcache/phpfastcache

### Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions (of 5.x releases).

### Patches The issue has been addressed by enforcing JSON conversion when deserializing

### Workarounds If you can't fix it, use another driver such as "Files" (Filesystem)

### References Fixing release: https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13

### For more information If you have any questions or comments about this advisory: * Open an issue in [the issue tracker](https://github.com/PHPSocialNetwork/phpfastcache/issues) * Email us at [security@geolim4.com](mailto:security@geolim4.com)

 https://cve.radiocsirt.org/vuln/gsd-2019-16774 gsd-2019-16774 2026-10-15T14:40:56.422619+00:00 gsd-2019-16774