Session validation vulnerability

PKSA-w6r4-8qtw-pspt

Affected package: zendframework/zend-session

Affected version: >=2.0.0,<2.0.99|>=2.1.0,<2.1.99|>=2.2.0,<2.2.9|>=2.3.0,<2.3.4

Reported by:
FriendsOfPHP/security-advisories