Packagist/zendframework/zendframework: high 7.5

ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`

Action: Upgrade zendframework/zendframework to 2.0.8 or later.

composer require zendframework/zendframework:2.0.8

composer require zendframework/zendframework:2.1.4

Affected

Fixed versions

Sources

• osv: GHSA-jq87-2wxp-8349
• https://github.com/zendframework/zendframework/commit/0a7ec3407f02db29ea2ffd6daa71ead6fd151cfe
• https://github.com/zendframework/zendframework/commit/7fcb88ebc2d56f74aa943909f2b6b53f5c86b081
• https://framework.zend.com/security/advisory/ZF2013-01
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-01.yaml
• https://github.com/zendframework/zendframework

published 2024-06-07T20:15:48Z · modified 2024-12-04T05:39:51.381754Z · JSON