Invalid CSRF validation of null or incorrectly formatted token identifiers

PKSA-zpm9-rbg9-9y3x CVE-2015-1786

Affected package: zendframework/zend-validator

Affected version: >=2.3.0,<2.3.6

Reported by:
FriendsOfPHP/security-advisories