Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/zendframework/zendframework1@1.7.0
purl pkg:composer/zendframework/zendframework1@1.7.0
Next non-vulnerable version 1.11.12
Latest non-vulnerable version 1.12.20
Risk
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-24xb-s5fu-xuc2
Aliases:
ZF2010-05
Cross-site Scripting Potential XSS vector in `Zend_Service_ReCaptcha_MailHide`.
1.12.0
Affected by 12 other vulnerabilities.
VCID-46j8-n7cg-3feu
Aliases:
ZF2009-02
Cross-site Scripting XSS vector in `Zend_Filter_StripTags`.
1.12.0
Affected by 12 other vulnerabilities.
VCID-6j4n-cucb-5fdy
Aliases:
ZF2010-02
Cross-site Scripting Potential XSS vector in `Zend_Dojo_View_Helper_Editor`.
1.12.0
Affected by 12 other vulnerabilities.
VCID-cp8b-e8wm-kfb3
Aliases:
ZF2010-06
Cross-Site Scripting Potential Security Issues in Bundled Dojo Library.
1.12.0
Affected by 12 other vulnerabilities.
VCID-e2nf-wm5h-fqav
Aliases:
ZF2009-01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') File Inclusion vector in `Zend_View::setScriptPath()` and `render()`.
1.12.0
Affected by 12 other vulnerabilities.
VCID-e98a-dehh-ybbe
Aliases:
ZF2010-03
Cross-site Scripting Potential XSS vector in `Zend_Filter_StripTags` when comments allowed.
1.12.0
Affected by 12 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.