{"action":"Upgrade zendframework/zend-mail to 2.4.11 or later.","affected":[{"fixed":"2.4.11","introduced":"2.0.0"},{"fixed":"2.7.2","introduced":"2.5.0"}],"component":"zendframework/zend-mail","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.4.11","2.7.2"],"ghsa_id":"GHSA-cxf7-m5g2-v594","id":"tcs_01M5KF1AB6EMGZ5HKNFPPRTEEP","modified_at":"2024-12-04T05:38:19.263581Z","published_at":"2024-06-07T21:19:22Z","references":["https://osv.dev/vulnerability/GHSA-cxf7-m5g2-v594","https://github.com/zendframework/zend-mail/commit/0a92d0b3a8b7d7c7659aa569f1a66a23d4ad51af","https://github.com/zendframework/zend-mail/commit/7260c9768bf27c84f994c48698493fd1fa62fca3","https://github.com/zendframework/zend-mail/commit/8d18478b40fdeef7239fb7ea203e072edcadbe54","https://framework.zend.com/security/advisory/ZF2016-04","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-mail/ZF2016-04.yaml","https://github.com/zendframework/zend-mail"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-cxf7-m5g2-v594","url":"https://osv.dev/vulnerability/GHSA-cxf7-m5g2-v594"}],"summary":"Zend-Mail remote code execution in zend-mail via Sendmail adapter"}