GHSA-2jx7-xg83-j2m7

Summary

Zendframework Denial of Service vector via XEE injection

Severity

high

Published

2024-06-07

References

• https://framework.zend.com/security/advisory/ZF2012-02
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2012-02.yaml
• https://github.com/zendframework/zf1

Related advisories

• GHSA-6fqw-j3vm-7f66 — critical · Packagist/zendframework/zendframework1
• GHSA-v42g-7q2x-cw32 — critical · Packagist/zendframework/zendframework1
• GHSA-2x36-qhx3-7m5f — critical · Packagist/zendframework/zendframework1
• GHSA-mhpx-3rv8-wrjm — critical · Packagist/zendframework/zendframework1
• GHSA-qf36-fx9f-232x — critical · Packagist/zendframework/zendframework1
• GHSA-848f-mph5-9pm9 — high · Packagist/zendframework/zendframework1
• GHSA-8xhv-gqm4-3w99 — high · Packagist/zendframework/zendframework1
• GHSA-9v78-h226-2rmq — high · Packagist/zendframework/zendframework1

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity