zendframework/zendframework vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-FH7R-58Q4-6387Mediumzendframework/zendframework: Zendframework URL Rewrite vulnerability GHSA-5GMF-3C43-Q73VMediumzendframework/zendframework: ZendFramework vulnerable to Cross-site Scripting GHSA-GFF2-P6VM-3P8GMediumzendframework/zendframework: ZendFramework potential remote code execution in zend-mail via Sendmail adapter GHSA-MG7H-9QFX-4R83Mediumzendframework/zendframework: ZendFramework Potential Proxy Injection Vulnerabilities GHSA-2FHR-8R8R-QP56Mediumzendframework/zendframework: ZendFramework Information Disclosure and Insufficient Entropy vulnerability GHSA-X2F4-8WXF-W3VFHighzendframework/zendframework: ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations GHSA-QC7W-4567-84WVCriticalzendframework/zendframework: Zendframework vulnerable to XXE/XEE attacks GHSA-XG9W-R469-M455Highzendframework/zendframework: ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities GHSA-62F6-H68R-3JPWMediumzendframework/zendframework: Zendframework session validation vulnerability GHSA-JQ87-2WXP-8349Highzendframework/zendframework: ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`GHSA-8Q77-CV62-JJ38Mediumzendframework/zendframework: Zendframework has potential Cross-site Scripting vector in multiple view helpers GHSA-XFFP-6W68-4775Highzendframework/zendframework: Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`CVE-2014-8089Criticalzendframework/zendframework1: Zend Framework SQL injection vulnerability CVE-2015-3154Mediumzendframework/zendframework: Zenario CMS vulnerable to CRLF injection CVE-2015-0270Criticalzendframework/zendframework: Zend Framework Allows SQL Injection CVE-2015-5723Highdoctrine/annotations: Doctrine Security Misconfiguration Vulnerability CVE-2015-5161Mediumzendframework/zendframework: ZendXml and Zend Framework contain XXE and XEE Vulnerabilities CVE-2015-1786Highzendframework/zendframework: Zend Framework CSRF Vulnerability CVE-2014-8088Mediumzendframework/zendframework: Zend Access Restriction Bypass CVE-2015-7503Highzendframework/zendframework: Zend Framework Information Disclosure CVE-2016-4861Criticalzendframework/zendframework: Zend Framework Allows SQL Injection CVE-2016-6233Criticalzendframework/zendframework: Zend Framework Allows SQL Injection CVE-2021-3007Criticalzendframework/zendframework: Remote code execution in zendframework and laminas-http

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo