Tag
php-fpm
Safeguard articles tagged "php-fpm" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Container Security
Hardening PHP-FPM and Apache Container Images
PHP containers ship with defaults built for compatibility, not security. Opcache settings, disabled functions, and process ownership close the gaps.
Jul 11, 20266 min read
Vulnerability Analysis
PHP-FPM/Nginx path disclosure RCE (CVE-2019-11043)
CVE-2019-11043 let attackers gain unauthenticated RCE on PHP-FPM/Nginx stacks via a PATH_INFO underflow. Here's the impact, timeline, and fixes.
Jan 17, 20267 min read