Packagist/zendframework/zendopenid: high 7.5
ZendOpenID potential security issue in login mechanism
Action: Upgrade zendframework/zendopenid to 2.0.2 or later.
composer require zendframework/zendopenid:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-3x57-m5p4-rgh4
- https://github.com/zendframework/ZendOpenId/commit/16648e1b2acf760d0c67a8c1dd913fed0c0f61f7
- https://github.com/zendframework/ZendOpenId/commit/709789c1ca290771730133db4d8b8de2972b36ce
- https://framework.zend.com/security/advisory/ZF2014-02
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendopenid/ZF2014-02.yaml
- https://github.com/zendframework/ZendOpenId
published · modified · JSON