Packagist/zendframework/zendframework: medium 5.3

ZendFramework Information Disclosure and Insufficient Entropy vulnerability

Action: Upgrade zendframework/zendframework to 2.4.9 or later.

composer require zendframework/zendframework:2.4.9

Affected

Fixed versions

Sources

• osv: GHSA-2fhr-8r8r-qp56
• https://github.com/zendframework/zendframework/commit/ced8ff93ef892a64885c03f5dfab3f788a219709
• https://framework.zend.com/security/advisory/ZF2015-09
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2015-09.yaml
• https://github.com/zendframework/zendframework

published 2024-06-07T20:37:45Z · modified 2024-12-04T05:40:33.932306Z · JSON