{"action":"Upgrade zendframework/zendframework to 2.4.11 or later.","affected":[{"fixed":"2.4.11","introduced":"2.0.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.4.11"],"ghsa_id":"GHSA-gff2-p6vm-3p8g","id":"tcs_01M5KF2NVTBQ77784TDK9YEM31","modified_at":"2024-12-04T05:39:06.674820Z","published_at":"2024-06-07T20:47:30Z","references":["https://osv.dev/vulnerability/GHSA-gff2-p6vm-3p8g","https://github.com/zendframework/zendframework/commit/7c1e89815f5a9c016f4b8088e59b07cb2bf99dc0","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2016-04.yaml","https://github.com/zendframework/zendframework","https://web.archive.org/web/20201107093523/https://framework.zend.com/security/advisory/ZF2016-04"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-gff2-p6vm-3p8g","url":"https://osv.dev/vulnerability/GHSA-gff2-p6vm-3p8g"}],"summary":"ZendFramework potential remote code execution in zend-mail via Sendmail adapter"}