Packagist/zendframework/zendframework: medium 6.5

Zendframework session validation vulnerability

Action: Upgrade zendframework/zendframework to 2.2.9 or later.

composer require zendframework/zendframework:2.2.9

composer require zendframework/zendframework:2.3.4

Affected

Fixed versions

Sources

• osv: GHSA-62f6-h68r-3jpw
• https://github.com/zendframework/zendframework/commit/1672aee3531205e5c1a0b96d8c680124ec93db09
• https://github.com/zendframework/zendframework/commit/282135561cbf98cc93274c57966b021fd6e051b9
• https://github.com/zendframework/zendframework/commit/5f06a1f80a1aaeac87a46bfa9b63a5a74a14866c
• https://github.com/zendframework/zendframework/commit/9493d725ef869e6ce7ab78167539223396fda491
• https://github.com/zendframework/zendframework/commit/ddbf43ac3fe28fe98a4104993d0cb4bffb13a026
• https://github.com/zendframework/zendframework/commit/f22a83c611732fbc0328f0f887bccc075be1fd56
• https://framework.zend.com/security/advisory/ZF2015-01
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2015-01.yaml
• https://github.com/zendframework/zendframework

published 2024-06-07T20:20:21Z · modified 2024-12-04T05:37:06.052419Z · JSON