Packagist/zendframework/zendframework: medium 6.5

ZendFramework potential remote code execution in zend-mail via Sendmail adapter

Action: Upgrade zendframework/zendframework to 2.4.11 or later.

composer require zendframework/zendframework:2.4.11

Affected

Fixed versions

Sources

• osv: GHSA-gff2-p6vm-3p8g
• https://github.com/zendframework/zendframework/commit/7c1e89815f5a9c016f4b8088e59b07cb2bf99dc0
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2016-04.yaml
• https://github.com/zendframework/zendframework
• https://web.archive.org/web/20201107093523/https://framework.zend.com/security/advisory/ZF2016-04

published 2024-06-07T20:47:30Z · modified 2024-12-04T05:39:06.674820Z · JSON