IndexedVerified
PHP Security
PHP SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch php-security --engine opengrepcurl https://api.greprules.io/api/packs/php-security.tar.gz -o php-security.tar.gz- Owner
- Provally
- Total rules
- 292
- Downloads
- 2
- Last updated
- 2026-06-29
- Languages
PHP
Included rules
CVE-2026-53912: Non Recursive Sensitive Data Redaction
cve-2026-53912-non-recursive-sensitive-data-redactionCVE-2026-53901: Premature Unset Mass Assignmentcve-2026-53901-premature-unset-mass-assignmentCVE-2026-50636: Limesurvey Path Traversal From Extension Namecve-2026-50636-limesurvey-path-traversal-from-extension-nameCVE-2026-50635: Path Traversal Extension Namecve-2026-50635-path-traversal-extension-nameCVE-2026-49260: Escapeshellarg File Check Fallbackcve-2026-49260-escapeshellarg-file-check-fallbackCVE-2026-48249: Insecure Custom Mysql Prepare Shimcve-2026-48249-insecure-custom-mysql-prepare-shimCVE-2026-47348: Typo3 Indexed Search Item Title Xsscve-2026-47348-typo3-indexed-search-item-title-xssCVE-2026-47347: Weak Url Blocklist Strpbrkcve-2026-47347-weak-url-blocklist-strpbrkCVE-2026-47345: Html5 Php Outputrules Missing Namespaceattrscve-2026-47345-html5-php-outputrules-missing-namespaceattrsCVE-2026-47344: Src Sanitizer Php Cwe 79 Cve 2026 47344cve-2026-47344-src-sanitizer-php-cwe-79-cve-2026-47344CVE-2026-47343: Resource Resourcestorage Php Cwe 000 Cve 2026 47343cve-2026-47343-resource-resourcestorage-php-cwe-000-cve-2026-47343CVE-2026-46493: Insecure Secret Generation Uniqid Randcve-2026-46493-insecure-secret-generation-uniqid-randCVE-2026-46489: Symfony Unvalidated File Upload Base64cve-2026-46489-symfony-unvalidated-file-upload-base64CVE-2026-45332: Php Missing Totp Checkcve-2026-45332-php-missing-totp-checkCVE-2026-45055: Php Unsanitized Request Loop Interpolationcve-2026-45055-php-unsanitized-request-loop-interpolationCVE-2026-44832: Missing Admin Permission Checkcve-2026-44832-missing-admin-permission-checkCVE-2026-44167: Phpseclib Asn1 Oid Length Bypasscve-2026-44167-phpseclib-asn1-oid-length-bypassCVE-2026-44012: Craftcms Query Configure Sqlicve-2026-44012-craftcms-query-configure-sqliCVE-2026-44011: Craftcms Insufficient Cleanseconfig Sqlicve-2026-44011-craftcms-insufficient-cleanseconfig-sqliCVE-2026-43926: Fossbilling Unvalidated Module Hook Registrationcve-2026-43926-fossbilling-unvalidated-module-hook-registrationCVE-2026-42845: Grav Unvalidated Stream File Readcve-2026-42845-grav-unvalidated-stream-file-readCVE-2026-42610: Php Iterable Config Command Injectioncve-2026-42610-php-iterable-config-command-injectionCVE-2026-42605: Php Flysystem Local Adapter Path Not Normalizedcve-2026-42605-php-flysystem-local-adapter-path-not-normalizedCVE-2026-42569: Phpvms Laravel Importer Route Group Missing Authcve-2026-42569-phpvms-laravel-importer-route-group-missing-auth24 of 292 loaded