{"action":"Upgrade zendframework/zendframework to 2.0.8 or later.","affected":[{"fixed":"2.0.8","introduced":"2.0.0"},{"fixed":"2.1.4","introduced":"2.1.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.8","2.1.4"],"ghsa_id":"GHSA-x2f4-8wxf-w3vf","id":"tcs_01M5KFAGZ1AQYVAJCMR0FY56RW","modified_at":"2024-12-04T05:35:16.874623Z","published_at":"2024-06-07T20:35:15Z","references":["https://osv.dev/vulnerability/GHSA-x2f4-8wxf-w3vf","https://github.com/zendframework/zendframework/commit/0ef63e7db5fa30a79a58eb7c6466c6ab5c0618c5","https://github.com/zendframework/zendframework/commit/546074660e6e10b9191bf0dc62b524d99f71a5cd","https://github.com/zendframework/zendframework/commit/6d83777786b8e6171d82191ef917afd09fcb6601","https://github.com/zendframework/zendframework/commit/870741d0c01a24ff23f9e209c8d393bd3a4115e3","https://github.com/zendframework/zendframework/commit/95c88c236e80b475141d227bdf7866ca40287dd1","https://github.com/zendframework/zendframework/commit/d1f259b9d6dbd7c3828360afcfdd3658f2163ea0","https://framework.zend.com/security/advisory/ZF2013-03","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-03.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x2f4-8wxf-w3vf","url":"https://osv.dev/vulnerability/GHSA-x2f4-8wxf-w3vf"}],"summary":"ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations"}