Packagist/zendframework/zendframework: high 7.4

ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities

Action: Upgrade zendframework/zendframework to 2.0.8 or later.

composer require zendframework/zendframework:2.0.8

composer require zendframework/zendframework:2.1.4

Affected

Fixed versions

Sources

• osv: GHSA-xg9w-r469-m455
• https://github.com/zendframework/zendframework/commit/6975695dfdb201bda0aea02bcc11b4a85ddc89fa
• https://github.com/zendframework/zendframework/commit/97b98e7208f93613ab358432e56b6e2245153807
• https://framework.zend.com/security/advisory/ZF2013-02
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-02.yaml
• https://github.com/zendframework/zendframework

published 2024-06-07T20:27:03Z · modified 2024-12-04T05:40:43.088178Z · JSON