Search by 
zendframework/zend-json Security Advisories for 2.2.5 (1)
-
Potential XXE/XEE attacks using PHP functions: simplexml_load_*, DOMDocument::loadXML, and xml_parse
Affected version: >=2.1.0,<2.1.6|>=2.2.0,<2.2.6
Reported by:
FriendsOfPHP/security-advisories