Packagist/zendframework/zend-mail: high 8.8

Zend-Mail remote code execution in zend-mail via Sendmail adapter

Action: Upgrade zendframework/zend-mail to 2.4.11 or later.

composer require zendframework/zend-mail:2.4.11

composer require zendframework/zend-mail:2.7.2

Affected

Fixed versions

Sources

• osv: GHSA-cxf7-m5g2-v594
• https://github.com/zendframework/zend-mail/commit/0a92d0b3a8b7d7c7659aa569f1a66a23d4ad51af
• https://github.com/zendframework/zend-mail/commit/7260c9768bf27c84f994c48698493fd1fa62fca3
• https://github.com/zendframework/zend-mail/commit/8d18478b40fdeef7239fb7ea203e072edcadbe54
• https://framework.zend.com/security/advisory/ZF2016-04
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-mail/ZF2016-04.yaml
• https://github.com/zendframework/zend-mail

published 2024-06-07T21:19:22Z · modified 2024-12-04T05:38:19.263581Z · JSON