Packagist/zendframework/zendframework: high 8.8
ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
Action: Upgrade zendframework/zendframework to 2.0.8 or later.
composer require zendframework/zendframework:2.0.8composer require zendframework/zendframework:2.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.8 | - |
| 2.1.0 | 2.1.4 | - |
Fixed versions
| 2.0.8 | 2.1.4 |
Sources
- osv: GHSA-x2f4-8wxf-w3vf
- https://github.com/zendframework/zendframework/commit/0ef63e7db5fa30a79a58eb7c6466c6ab5c0618c5
- https://github.com/zendframework/zendframework/commit/546074660e6e10b9191bf0dc62b524d99f71a5cd
- https://github.com/zendframework/zendframework/commit/6d83777786b8e6171d82191ef917afd09fcb6601
- https://github.com/zendframework/zendframework/commit/870741d0c01a24ff23f9e209c8d393bd3a4115e3
- https://github.com/zendframework/zendframework/commit/95c88c236e80b475141d227bdf7866ca40287dd1
- https://github.com/zendframework/zendframework/commit/d1f259b9d6dbd7c3828360afcfdd3658f2163ea0
- https://framework.zend.com/security/advisory/ZF2013-03
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-03.yaml
- https://github.com/zendframework/zendframework
published · modified · JSON