{"action":"Upgrade zendframework/zendframework to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"2.0.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-mg7h-9qfx-4r83","id":"tcs_01M5KF5GK3BMC4AFSN76WBY4PN","modified_at":"2024-12-04T05:25:14.395411Z","published_at":"2024-06-07T20:46:14Z","references":["https://osv.dev/vulnerability/GHSA-mg7h-9qfx-4r83","https://github.com/zendframework/zendframework/commit/1040acaf70d297ec7214934d8ddc3e811d249b5c","https://github.com/zendframework/zendframework/commit/ad8fdc3378710b7cfbe2a271dbb0e3256cffb599","https://github.com/zendframework/zendframework/commit/ada1fab92f6d5c7ad96c5a63f3196d925e3f5887","https://github.com/zendframework/zendframework/commit/b914ecdd4d17ab5b61f15ccdc02a6e9b255b15d8","https://github.com/zendframework/zendframework/commit/c3819abbf2c9571069c893d27ae6170bda413925","https://github.com/zendframework/zendframework/commit/cfaf5ea095c93f3e70343358a3a88c3924d7ed7d","https://framework.zend.com/security/advisory/ZF2012-04","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2012-04.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-mg7h-9qfx-4r83","url":"https://osv.dev/vulnerability/GHSA-mg7h-9qfx-4r83"}],"summary":"ZendFramework Potential Proxy Injection Vulnerabilities"}