Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

zendframework/zend-http

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
Packagist

Advisories 1

  • CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows…

    Affected: from 2.0.0beta4, fixed in 2.3.8; from 2.4.0rc1, fixed in 2.4.1; fixed in 1.12.12.