GHSA-88g4-74f3-63x9: phpMyFAQ has Potential Authenticated Path Traversal in PDF Export

August 25, 2026

There is an authenticated path traversal condition in the PDF export functionality, specifically within the PDF image resolution logic.

The issue may allow a privileged FAQ editor to cause the application to attempt reading files outside the intended content directory during PDF generation.

References

github.com/advisories/GHSA-88g4-74f3-63x9
github.com/thorsten/phpMyFAQ/commit/91ce64405479933d7d62c751fa79c2f5c6fda591
github.com/thorsten/phpMyFAQ/commit/b709ebe69405385785c2a74ae940c3e8d4cd0a8b
github.com/thorsten/phpMyFAQ/security/advisories/GHSA-88g4-74f3-63x9

Code Behaviors & Features

Detect and mitigate GHSA-88g4-74f3-63x9 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →