{"action":"Upgrade zendframework/zend-diactoros to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"1.0.0"}],"component":"zendframework/zend-diactoros","cve_ids":["CVE-2015-3257"],"ecosystem":"Packagist","epss":0.00908,"exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-rh3c-7wqx-6w95","id":"tcs_01M5KF8941HXKN1PN5KQ5Z8AZ3","modified_at":"2024-04-23T23:26:46.955379Z","published_at":"2022-05-17T01:22:50Z","references":["https://osv.dev/vulnerability/GHSA-rh3c-7wqx-6w95","https://nvd.nist.gov/vuln/detail/CVE-2015-3257","https://framework.zend.com/security/advisory/ZF2015-05","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-diactoros/CVE-2015-3257.yaml","https://github.com/zendframework/zend-diactoros","http://www.securityfocus.com/bid/75466"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rh3c-7wqx-6w95","url":"https://osv.dev/vulnerability/GHSA-rh3c-7wqx-6w95"}],"summary":"zend-diactoros Cross-site Scripting (XSS)"}