GCVE-110-VULN-COMPOSER-2026-000090

Advisory PublishedCVSS 4.2/10

Vulnetix · Advisory published October 21, 2026

[PHP-ASSERT-VAR] PHP assert() on a variable used as a dynamic code-execution sink — matched: assert($nbits < 16);

Weaknesses (CWE)

CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

CVSS 3.1

4.2/10

Medium · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Vendor	Product	Versions	Platforms
packagist	arakne/swf	0.6.0 (affected)	—

advisory

web

774 records in the GCVE database · Updated October 31, 2026

No matching records found.

Investigate this vulnerability in the interactive console or download the raw GCVE record.