zendframework/zendframework Security Advisories for 2.4.7 (6)
-
[CRITICAL] Remote code execution in zendframework and laminas-http
PKSA-9gb9-jn3z-tytw CVE-2021-3007 GHSA-xx8f-qf9f-5fgw
Affected version: <=3.0.0
Reported by:
GitHub -
Reported by:
FriendsOfPHP/security-advisories -
Potential remote code execution in zend-mail via Sendmail adapter
Affected version: >=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=2.4.0,<2.4.11
Reported by:
FriendsOfPHP/security-advisories -
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
Affected version: >=2.0.0,<2.4.9
Reported by:
FriendsOfPHP/security-advisories -
Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKey
PKSA-xx58-19nw-1zf8 CVE-2015-7503
Affected version: >=2.0.0,<2.4.9
Reported by:
FriendsOfPHP/security-advisories -
[HIGH] Filesystem Permissions Issues in Multiple Components
PKSA-j4n8-j1jc-9t1m CVE-2015-5723 GHSA-pw5c-xqf2-6xc2
Affected version: >=2.4.0,<2.4.8
Reported by:
GitHub, FriendsOfPHP/security-advisories