Search by 
zendframework/zend-session Security Advisories for 2.2.8 (1)
-
Session validation vulnerability
Affected version: >=2.0.0,<2.0.99|>=2.1.0,<2.1.99|>=2.2.0,<2.2.9|>=2.3.0,<2.3.4
Reported by:
FriendsOfPHP/security-advisories