Packagist/zendframework/zend-form: medium 6.1
Zend-Form vulnerable to Cross-site Scripting
Action: Upgrade zendframework/zend-form to 2.2.7 or later.
composer require zendframework/zend-form:2.2.7composer require zendframework/zend-form:2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.2.7 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.2.7 | 2.3.1 |
Sources
- osv: GHSA-gvpp-6jrj-5pqc
- https://github.com/zendframework/zend-form/commit/6fe40314e8e3477494aadd03d62573bd1c212bd1
- https://github.com/zendframework/zend-form/commit/d7a1f5bc4626b1df990391502a868b28c37ba65d
- https://github.com/zendframework/zend-form/commit/fd43a951460c4bc60c77a566129705f6bdb9c61b
- https://framework.zend.com/security/advisory/ZF2014-03
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-form/ZF2014-03.yaml
- https://github.com/zendframework/zend-form
published · modified · JSON