Search by 
zendframework/zend-mail Security Advisories for 2.2.9 (1)
-
Potential remote code execution in zend-mail via Sendmail adapter
Affected version: >=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=2.4.0,<2.4.11|>=2.5.0,<2.6.0|>=2.6.0,<2.7.0|>=2.7.0,<2.7.2
Reported by:
FriendsOfPHP/security-advisories