VulnerableCode Package Details - pkg:composer/zendframework/zend-http@2.4.2

Search for packages

Vulnerability	Summary	Fixed by
VCID-5wu3-x3v9-vbfc Aliases: GHSA-cg8w-5jrc-675g	Zend-HTTP URL Rewrite vulnerability zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a given server-side URL rewrite mechanism. When these headers are present on systems not running the specific URL rewriting mechanism, the logic would still trigger, allowing a malicious client or proxy to emulate the headers to request arbitrary content.	2.8.1 Affected by 0 other vulnerabilities.
VCID-ktqb-v8q6-wuh9 Aliases: GHSA-f6p5-76fp-m248 GMS-2022-1062 GMS-2022-1063 GMS-2022-1064	URL Rewrite vulnerability in multiple zendframework components zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a given server-side URL rewrite mechanism. When these headers are present on systems not running the specific URL rewriting mechanism, the logic would still trigger, allowing a malicious client or proxy to emulate the headers to request arbitrary content.	2.8.1 Affected by 0 other vulnerabilities.
VCID-wz4g-j8zt-ruff Aliases: ZF2018-01	URL Redirection to Untrusted Site (Open Redirect) URL Rewrite vulnerability.	2.8.1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-5wu3-x3v9-vbfc
Aliases:
GHSA-cg8w-5jrc-675g

Zend-HTTP URL Rewrite vulnerability zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a given server-side URL rewrite mechanism. When these headers are present on systems not running the specific URL rewriting mechanism, the logic would still trigger, allowing a malicious client or proxy to emulate the headers to request arbitrary content.

2.8.1
Affected by 0 other vulnerabilities.

VCID-ktqb-v8q6-wuh9
Aliases:
GHSA-f6p5-76fp-m248
GMS-2022-1062
GMS-2022-1063
GMS-2022-1064

URL Rewrite vulnerability in multiple zendframework components zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a given server-side URL rewrite mechanism. When these headers are present on systems not running the specific URL rewriting mechanism, the logic would still trigger, allowing a malicious client or proxy to emulate the headers to request arbitrary content.

2.8.1
Affected by 0 other vulnerabilities.

VCID-wz4g-j8zt-ruff
Aliases:
ZF2018-01

URL Redirection to Untrusted Site (Open Redirect) URL Rewrite vulnerability.

2.8.1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-5bm4-grk6-w7hk	CRLF Injection Potential CRLF injection attacks in mail and HTTP headers.	CVE-2015-3154 GHSA-5957-5crx-79jx

Vulnerability

Summary

Aliases

VCID-5bm4-grk6-w7hk

CRLF Injection Potential CRLF injection attacks in mail and HTTP headers.

CVE-2015-3154
GHSA-5957-5crx-79jx

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-06T05:05:10.863035+00:00	GitLab Importer	Affected by	VCID-5wu3-x3v9-vbfc	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/zendframework/zend-http/GHSA-cg8w-5jrc-675g.yml	38.6.0
2026-06-06T01:43:00.322750+00:00	GitLab Importer	Affected by	VCID-ktqb-v8q6-wuh9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/zendframework/zend-http/GMS-2022-1064.yml	38.6.0
2026-06-04T20:13:05.554984+00:00	GitLab Importer	Affected by	VCID-wz4g-j8zt-ruff	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/zendframework/zend-http/ZF2018-01.yml	38.6.0
2026-06-04T20:04:49.183825+00:00	GitLab Importer	Fixing	VCID-5bm4-grk6-w7hk	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/zendframework/zend-http/CVE-2015-3154.yml	38.6.0