Read the docs

flightphp

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

flightphp records in CISA KEV

No flightphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flight 1 record HIGH

Records

1 record in Flight · all components

TI-2014-08426 CVE-2014-125127 · GHSA-q996-685m-c683

Denial of Service (DoS) vulnerability in mikecao/flight

Priority HIGH 72

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager loading of request bodies in the Request class constructor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2025-09-03 No fix listed CWE-770
Open these records in search →