{"action":"Upgrade zendframework/zend-json to 2.1.6 or later.","affected":[{"fixed":"2.1.6","introduced":"2.1.0"},{"fixed":"2.2.6","introduced":"2.2.0"}],"component":"zendframework/zend-json","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.1.6","2.2.6"],"ghsa_id":"GHSA-8x2v-pcg7-94f4","id":"tcs_01M5KEZEV2XTH3G92SQ6RAKX8X","modified_at":"2024-12-04T05:40:59.875563Z","published_at":"2024-06-07T21:49:11Z","references":["https://osv.dev/vulnerability/GHSA-8x2v-pcg7-94f4","https://github.com/zendframework/zend-json/commit/078e77a6e59cdbf32a94691afe3523db340f5da9","https://github.com/zendframework/zend-json/commit/7a747fbefe566c28a94b7e7ca37c15fc09ba4754","https://github.com/zendframework/zend-json/commit/865f96ecbc5e080fccb5e75304ce06ac57d2ce22","https://github.com/zendframework/zend-json/commit/89fc6f760478dc15519cb3ef4e4976425dc6ee10","https://github.com/zendframework/zend-json/commit/9fe5103dc9be472fa0a443ca36619a2953b6f88e","https://github.com/zendframework/zend-json/commit/acc60fc3fe56f5b0ad218c4c5789b21f11bc3a89","https://framework.zend.com/security/advisory/ZF2014-01","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-json/ZF2014-01.yaml","https://github.com/zendframework/zend-json"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8x2v-pcg7-94f4","url":"https://osv.dev/vulnerability/GHSA-8x2v-pcg7-94f4"}],"summary":"Zend-JSON vulnerable to XXE/XEE attacks"}