[CRITICAL] Route Parameter Injection Via Query String in Zend\Mvc

PKSA-zg2n-4q1r-bfvg GHSA-qc7w-4567-84wv

Affected package: zendframework/zendframework

Affected version: >=2.0.0,<2.0.8|>=2.1.0,<2.1.4

Reported by:
GitHub, FriendsOfPHP/security-advisories