Security advisories

high2024-06-10

CVE-2024-36528-nukeviet Deserialization of Untrusted Data vulnerability

nukeviet/nukeviet · GHSA-mhj4-vrcv-x4xc

high2024-06-09

CVE-2024-37568-Authlib has algorithm confusion with asymmetric public keys

lepture/authlib · GHSA-5357-c2jx-v7qh

low2024-06-08

CVE-2024-4680-zenml-io/zenml does not expire the session after password reset

zenml-io/zenml · GHSA-99hm-86h7-gr3g

high2024-06-07

zfr authentication adapter did not verify validity of tokens

zf-fr/zfr-oauth2-server-module · GHSA-rcm4-jv5g-wccm

high2024-06-07

ZendOpenID potential security issue in login mechanism

zendframework/zendopenid · GHSA-3x57-m5p4-rgh4

critical2024-06-07

Zendframework1 Potential SQL injection in ORDER and GROUP functions

zendframework/zf1 · GHSA-6fqw-j3vm-7f66

high2024-06-07

Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability

zendframework/zf1 · GHSA-848f-mph5-9pm9

high2024-06-07

ZendFramework1 Potential Insufficient Entropy Vulnerability

zendframework/zf1 · GHSA-8xhv-gqm4-3w99

critical2024-06-07

Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)

zendframework/zf1 · GHSA-v42g-7q2x-cw32

high2024-06-07

Zend-Captcha Information Disclosure and Insufficient Entropy vulnerability

zendframework/zend-captcha · GHSA-mg4x-prh7-g4mx

critical2024-06-07

ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select

zendframework/zf1 · GHSA-2x36-qhx3-7m5f

high2024-06-07

Zendframework potential security issue in login mechanism

zendframework/zf1 · GHSA-9v78-h226-2rmq

critical2024-06-07

willdurand/js-translation-bundle potential path traversal attack and remote code injection

willdurand/bazingajstranslationbundle · GHSA-x86x-qhf8-f37w

high2024-06-07

Adminer file disclosure vulnerability

vrana/adminer · GHSA-97h7-mf38-g9mf

medium2024-06-07

ua-parser/uap-php ReDoS vulnerability

ua-parser/uap-php · GHSA-78hm-5hjw-58mh

medium2024-06-07

Zend-developer-tools information disclosure vulnerability

zendframework/zend-developer-tools · GHSA-qg7m-mwxm-j3h7

medium2024-06-07

Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed

zendframework/zf1 · GHSA-4vf6-mq7w-3hp6

medium2024-06-07

Zend-Diactoros URL Rewrite vulnerability

zendframework/zend-diactoros · GHSA-fq4p-86hh-42v9

high2024-06-07

Zend-Navigation vulnerable to Cross-site Scripting

zendframework/zend-navigation · GHSA-6v7p-5qcq-268c

high2024-06-07

Zend-Feed URL Rewrite vulnerability

zendframework/zend-feed · GHSA-jmmp-vh96-78rm