Route Parameter Injection Via Query String in Zend\Mvc

PKSA-zg2n-4q1r-bfvg

Affected package: zendframework/zendframework

Affected version: >=2.0.0,<2.0.8|>=2.1.0,<2.1.4

Reported by:
FriendsOfPHP/security-advisories