[MEDIUM] PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

PKSA-qhjm-rpqc-qkn6 CVE-2026-119193 GHSA-9vw2-f4vp-x7gf

Affected package: phpunit/phpunit

Affected version: >=13.4.0,<13.4.4

Reported by:
GitHub, FriendsOfPHP/security-advisories