GHSA-2x36-qhx3-7m5f

Summary

ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select

Severity

critical

Published

2024-06-07

References

• https://framework.zend.com/security/advisory/ZF2014-04
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2014-04.yaml
• https://github.com/zendframework/zf1

Related advisories

• GHSA-6fqw-j3vm-7f66 — critical · Packagist/zendframework/zendframework1
• GHSA-v42g-7q2x-cw32 — critical · Packagist/zendframework/zendframework1
• GHSA-mhpx-3rv8-wrjm — critical · Packagist/zendframework/zendframework1
• GHSA-qf36-fx9f-232x — critical · Packagist/zendframework/zendframework1
• GHSA-848f-mph5-9pm9 — high · Packagist/zendframework/zendframework1
• GHSA-8xhv-gqm4-3w99 — high · Packagist/zendframework/zendframework1
• GHSA-9v78-h226-2rmq — high · Packagist/zendframework/zendframework1
• GHSA-229x-22xc-2f2w — high · Packagist/zendframework/zendframework1

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity