Security advisories

medium2024-06-07

Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`

zendframework/zf1 · GHSA-4v57-pwvf-x35j

medium2024-06-07

Zend-Form vulnerable to Cross-site Scripting

zendframework/zend-form · GHSA-gvpp-6jrj-5pqc

medium2024-06-07

Zendframework Potential XSS or HTML Injection vector in Zend_Json

zendframework/zf1 · GHSA-vvm3-rv48-j3g5

high2024-06-07

Zend-HTTP URL Rewrite vulnerability

zendframework/zend-http · GHSA-cg8w-5jrc-675g

medium2024-06-07

ZendFramework1 Potential Security Issues in Bundled Dojo Library

zendframework/zf1 · GHSA-w5mj-j45q-m638

critical2024-06-07

Zend-JSON vulnerable to XXE/XEE attacks

zendframework/zend-json · GHSA-8x2v-pcg7-94f4

high2024-06-07

Zendframework Local file disclosure via XXE injection in Zend_XmlRpc

zendframework/zf1 · GHSA-229x-22xc-2f2w

high2024-06-07

Zendframework Denial of Service vector via XEE injection

zendframework/zf1 · GHSA-2jx7-xg83-j2m7

medium2024-06-07

ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`

zendframework/zf1 · GHSA-gwpm-pm6x-h7rj

high2024-06-07

CVE-2024-36827-ebookmeta XML External Entity vulnerability

dnkorpushov/ebookmeta · GHSA-whf4-fpj8-pgg8

high2024-06-07

CVE-2024-37388-ebookmeta XML External Entity vulnerability

dnkorpushov/ebookmeta · GHSA-hx54-pf28-7xch

medium2024-06-07

Zend-Session session validation vulnerability

zendframework/zend-session · GHSA-96c6-m98x-hxjx

medium2024-06-07

ZendFramework Potential Cross-site Scripting in Development Environment Error View Script

zendframework/zf1 · GHSA-g52p-86j5-xr8q

high2024-06-07

Zend-Mail remote code execution in zend-mail via Sendmail adapter

zendframework/zend-mail · GHSA-cxf7-m5g2-v594

critical2024-06-07

ZendFramework potential XML eXternal Entity injection vectors

zendframework/zf1 · GHSA-mhpx-3rv8-wrjm

high2024-06-07

ZendFramework potential XML eXternal Entity injection vectors

zendframework/zf1 · GHSA-4j9x-g4x8-vcmf

medium2024-06-07

ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings

zendframework/zf1 · GHSA-hg35-vqp3-fv39

critical2024-06-07

ZendFramework potential SQL Injection Vector When Using PDO_MySql

zendframework/zf1 · GHSA-qf36-fx9f-232x

medium2024-06-07

ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`

zendframework/zf1 · GHSA-j543-vg33-g6vj

critical2024-06-07

ZendFramework vulnerable to XXE/XEE attacks

zendframework/zend-xmlrpc · GHSA-f4fj-q6m4-cc52