[CRITICAL] zend-mail remote code execution via Sendmail adapter

PKSA-chcf-1npz-sv27 CVE-2016-10034 GHSA-r9mw-gwx9-v3h5

Affected version: >=2.7,<2.7.2|>=2.6,<=2.6.2|>=2.5,<=2.5.2|<2.4.11

Reported by:
GitHub

[HIGH] Potential remote code execution in zend-mail via Sendmail adapter

PKSA-qgvm-q7ch-sv7g GHSA-cxf7-m5g2-v594

Affected version: >=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=2.4.0,<2.4.11|>=2.5.0,<2.6.0|>=2.6.0,<2.7.0|>=2.7.0,<2.7.2

Reported by:
GitHub, FriendsOfPHP/security-advisories

Potential CRLF injection attacks in mail and HTTP headers

PKSA-3skz-jnsp-6kt1 CVE-2015-3154

Affected version: >=2.0.0,<2.0.99|>=2.1.0,<2.1.99|>=2.3.0,<2.3.8|>=2.4.0,<2.4.1

Reported by:
FriendsOfPHP/security-advisories