{"action":"Upgrade zendframework/zendframework to 2.2.5 or later.","affected":[{"fixed":"2.2.5","introduced":"2.2.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.2.5"],"ghsa_id":"GHSA-xffp-6w68-4775","id":"tcs_01M5KFAZ7888GQZMVHP1Z8F3JX","modified_at":"2024-12-04T05:41:43.344161Z","published_at":"2024-06-07T20:02:07Z","references":["https://osv.dev/vulnerability/GHSA-xffp-6w68-4775","https://github.com/zendframework/zendframework/commit/bb6784461d3b23ef1db4be8cf47957ccc3b681ed","https://framework.zend.com/security/advisory/ZF2013-04","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-04.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xffp-6w68-4775","url":"https://osv.dev/vulnerability/GHSA-xffp-6w68-4775"}],"summary":"Zendframework Remote Address Spoofing Vector in `Zend\\Http\\PhpEnvironment\\RemoteAddress`"}