Packagist/zendframework/zend-navigation: high 7.5
Zend-Navigation vulnerable to Cross-site Scripting
Action: Upgrade zendframework/zend-navigation to 2.2.7 or later.
composer require zendframework/zend-navigation:2.2.7composer require zendframework/zend-navigation:2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.2.7 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.2.7 | 2.3.1 |
Sources
- osv: GHSA-6v7p-5qcq-268c
- https://framework.zend.com/security/advisory/ZF2014-03
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-navigation/ZF2014-03.yaml
- https://github.com/zendframework/zend-navigation
published · modified · JSON