{"action":"Upgrade zendframework/zendframework to 2.0.8 or later.","affected":[{"fixed":"2.0.8","introduced":"2.0.0"},{"fixed":"2.1.4","introduced":"2.1.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.8","2.1.4"],"ghsa_id":"GHSA-jq87-2wxp-8349","id":"tcs_01M5KF4SNYZCWCJ7DT1HG4WKT6","modified_at":"2024-12-04T05:39:51.381754Z","published_at":"2024-06-07T20:15:48Z","references":["https://osv.dev/vulnerability/GHSA-jq87-2wxp-8349","https://github.com/zendframework/zendframework/commit/0a7ec3407f02db29ea2ffd6daa71ead6fd151cfe","https://github.com/zendframework/zendframework/commit/7fcb88ebc2d56f74aa943909f2b6b53f5c86b081","https://framework.zend.com/security/advisory/ZF2013-01","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-01.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jq87-2wxp-8349","url":"https://osv.dev/vulnerability/GHSA-jq87-2wxp-8349"}],"summary":"ZendFramework Route Parameter Injection Via Query String in `Zend\\Mvc`"}