{"id":"CVE-2011-1939","aliases":["CLSA-2026-1787038633","CLSA-2026-1787781004","EUVD-2011-1937","GHSA-229x-22xc-2f2w","GHSA-2x36-qhx3-7m5f","GHSA-9v78-h226-2rmq","GHSA-g52p-86j5-xr8q","GHSA-gff2-p6vm-3p8g","GHSA-mhpx-3rv8-wrjm","GHSA-v2wg-2jpv-87h6"],"status":"published","title":"Zendframework Local file disclosure via XXE injection in Zend_XmlRpc","description":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03858,"percentile":0.90237,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287","CWE-611","CWE-74","CWE-776","CWE-79","CWE-89"],"published":"2019-11-26T21:17:37Z","modified":"2026-10-15T09:48:00Z","exploits":[{"source":"exploitdb","id":"EDB-35784","title":"Zend Framework 1.11.4 - 'PDO_MySql' Security Bypass","type":"remote","platform":"linux","date":"2011-05-19","verified":true,"url":"https://www.exploit-db.com/exploits/35784"}],"fixes":[{"ecosystem":"Packagist","package":"zendframework/zendframework1","fixed_in":["1.11.13","1.12.7","1.12.4","1.11.4"],"sources":["ghsa","osv"]},{"ecosystem":"Packagist","package":"zendframework/zendframework","fixed_in":["2.4.11"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.11.13"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.7"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.11.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.4.11"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.4"}]}]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.0"},{"fixed":"1.11.0-p2+tuxcare"}]}],"versions":["1.11.0","1.11.0-p1+tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.6"},{"fixed":"1.10.6-p3+tuxcare"}]}],"versions":["1.10.6","1.10.6-p1+tuxcare","1.10.6-p2+tuxcare"],"bundled":3},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.11.13"}]}]},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.7"}]}],"versions":["1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.12.6"]},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.4"}]}],"versions":["1.12.0","1.12.1","1.12.2","1.12.3"]},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.11.4"}]}]},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.4.11"}]}],"versions":["2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.2.0","2.2.0rc1","2.2.0rc2","2.2.0rc3","2.2.1","2.2.10","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.2.7","2.2.8","2.2.9","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","2.4.0","2.4.0rc1","2.4.0rc2","2.4.0rc3","2.4.0rc4","2.4.0rc5","2.4.0rc6","2.4.0rc7","2.4.1","2.4.10","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.4.9"]},{"source":"osv","ecosystem":"Packagist","package":"zendframework/zendframework1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.4"}]}],"versions":["1.12.0","1.12.1","1.12.2","1.12.3"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"},{"vendor":"zend","product":"zend_framework"},{"vendor":"zendframework","product":"zendframework"},{"vendor":"zendframework;php","product":"php"},{"vendor":"zendframework;php","product":"zendframework"}],"references":[{"url":"http://www.securityfocus.com/bid/47919","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-1939","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1939","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2011-1939","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201408-01.xml","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://framework.zend.com/security/advisory/ZF2011-02","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://bugs.php.net/bug.php?id=47802","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2012-01.yaml","tags":["web"]},{"url":"https://web.archive.org/web/20210620092354/https://framework.zend.com/security/advisory/ZF2012-01","tags":["web"]},{"url":"https://github.com/advisories/GHSA-229x-22xc-2f2w"},{"url":"https://framework.zend.com/security/advisory/ZF2014-04","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2014-04.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2x36-qhx3-7m5f"},{"url":"https://framework.zend.com/security/advisory/ZF2014-02","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2014-02.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9v78-h226-2rmq"},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2011-01.yaml","tags":["web"]},{"url":"https://web.archive.org/web/20210120123405/https://framework.zend.com/security/advisory/ZF2011-01","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g52p-86j5-xr8q"},{"url":"https://github.com/zendframework/zendframework/commit/7c1e89815f5a9c016f4b8088e59b07cb2bf99dc0","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2016-04.yaml","tags":["web"]},{"url":"https://web.archive.org/web/20201107093523/https://framework.zend.com/security/advisory/ZF2016-04","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gff2-p6vm-3p8g"},{"url":"https://framework.zend.com/security/advisory/ZF2014-01","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2014-01.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mhpx-3rv8-wrjm"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1939"},{"url":"https://github.com/advisories/GHSA-v2wg-2jpv-87h6"},{"url":"https://github.com/zendframework/zf1","tags":["package"]},{"url":"https://github.com/zendframework/zendframework","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2011-1939","description":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.","status":"published","published":"2019-11-26T21:17:37Z","modified":"2024-08-06T22:46:00.81Z","updated_at":"2026-11-02T14:35:38.711857Z"}],"euvd":[{"id":"EUVD-2011-1937","description":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.","status":"published","published":"2019-11-26T21:17:37Z","modified":"2024-08-06T22:46:00Z","updated_at":"2026-11-03T01:55:54.666744Z"}],"ghsa":[{"id":"GHSA-229x-22xc-2f2w","title":"Zendframework Local file disclosure via XXE injection in Zend_XmlRpc","description":"Zend_XmlRpc is vulnerable to XML eXternal Entity (XXE) Injection attacks. The SimpleXMLElement class (SimpleXML PHP extension) is used in an insecure way to parse XML data. External entities can be specified by adding a specific DOCTYPE element to XML-RPC requests. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.\n\n","status":"published","published":"2024-06-07T21:39:43Z","modified":"2024-06-07T21:39:44Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:37:53.703286Z"},{"id":"GHSA-2x36-qhx3-7m5f","title":"ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select","description":"The implementation of the ORDER BY SQL statement in Zend_Db_Select of Zend Framework 1 contains a potential SQL injection when the query string passed contains parentheses.\n\nFor instance, the following code is affected by this issue:\n```\n$db     = Zend_Db::factory( /* options here */ );\n$select = $db-\u003eselect()\n    -\u003efrom(array('p' =\u003e 'products'))\n    -\u003eorder('MD5(1); drop table products');\necho $select;\n```\nThis code produce the string:\n```\nSELECT \"p\".* FROM \"products\" AS \"p\" ORDER BY MD5(1);drop table products ASC\n```\ninstead of the correct one:\n```\nSELECT \"p\".* FROM \"products\" AS \"p\" ORDER BY \"MD5(1);drop table products\" ASC\n```\nThe SQL injection occurs because we create a new Zend_Db_Expr() object, in presence of parentheses, passing directly the value without any filter on the string.","status":"published","published":"2024-06-07T22:24:52Z","modified":"2024-06-07T22:24:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:37:54.624184Z"},{"id":"GHSA-9v78-h226-2rmq","title":"Zendframework potential security issue in login mechanism","description":"Using the Consumer component of ZendOpenId (or Zend_OpenId in ZF1), it is possible to login using an arbitrary OpenID account (without knowing any secret information) by using a malicious OpenID Provider. That means OpenID it is possible to login using arbitrary OpenID Identity (MyOpenID, Google, etc), which are not under the control of our own OpenID Provider. Thus, we are able to impersonate any OpenID Identity against the framework.\n\nMoreover, the Consumer accepts OpenID tokens with arbitrary signed elements. The framework does not check if, for example, both openid.claimed_id and openid.endpoint_url are signed. It is just sufficient to sign one parameter. According to https://openid.net/specs/openid-authentication-2_0.html#positive_assertions, at least op_endpoint, return_to, response_nonce, assoc_handle, and, if present in the response, claimed_id and identity, must be signed.","status":"published","published":"2024-06-07T22:24:08Z","modified":"2024-06-07T22:24:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:37:54.624184Z"},{"id":"GHSA-g52p-86j5-xr8q","title":"ZendFramework Potential Cross-site Scripting in Development Environment Error View Script","description":"The default error handling view script generated using `Zend_Tool` failed to escape request parameters when run in the \"development\" configuration environment, providing a potential XSS attack vector.\n\n`Zend_Tool_Project_Context_Zf_ViewScriptFile` was patched such that the view script template now calls the `escape()` method on dumped request variables.\n\nZend Framework 1.11.4 includes a patch that adds escaping to the generated error/error.phtml view script, ensuring that request variables are escaped appropriately for the browser.\nDo note, however, that this will not update any previously generated code. You will still need to follow the next advice for previously generated error view scripts.","status":"published","published":"2024-06-07T21:20:39Z","modified":"2024-06-07T21:20:39Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:53.703286Z"},{"id":"GHSA-gff2-p6vm-3p8g","title":"ZendFramework potential remote code execution in zend-mail via Sendmail adapter","description":"When using the zend-mail component to send email via the `Zend\\Mail\\Transport\\Sendmail transport`, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they can be interpreted as additional command line arguments, leading to the vulnerability.\n\n","status":"published","published":"2024-06-07T20:47:30Z","modified":"2024-06-07T20:47:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:37:53.703286Z"},{"id":"GHSA-mhpx-3rv8-wrjm","title":"ZendFramework potential XML eXternal Entity injection vectors","description":"Numerous components utilizing PHP's `DOMDocument`, `SimpleXML`, and `xml_parse` functionality are vulnerable to two types of attacks:\n\n- XML eXternal Entity (XXE) Injection attacks. The above mentioned extensions are insecure by default, allowing external entities to be specified by adding a specific DOCTYPE element to XML documents and strings. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.\n- XML Entity Expansion (XEE) vectors, leading to Denial of Service vectors. XEE attacks occur when the XML DOCTYPE declaration includes XML entity definitions that contain either recursive or circular references; this leads to CPU and memory consumption, making Denial of Service exploits trivial to implement.\n","status":"published","published":"2024-06-07T21:16:36Z","modified":"2024-06-07T21:16:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611","CWE-776"],"updated_at":"2026-11-02T14:37:53.703286Z"},{"id":"GHSA-v2wg-2jpv-87h6","title":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when...","description":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.","status":"published","published":"2022-04-22T00:24:16Z","modified":"2024-04-03T23:05:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:55:47.283285Z"}],"nvd":[{"id":"CVE-2011-1939","description":"SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.","status":"published","published":"2019-11-26T22:15:14.133Z","modified":"2026-06-16T23:30:25.98Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:12.945371Z"}],"osv":[{"id":"GHSA-229x-22xc-2f2w","title":"Zendframework Local file disclosure via XXE injection in Zend_XmlRpc","description":"Zend_XmlRpc is vulnerable to XML eXternal Entity (XXE) Injection attacks. The SimpleXMLElement class (SimpleXML PHP extension) is used in an insecure way to parse XML data. External entities can be specified by adding a specific DOCTYPE element to XML-RPC requests. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.\n\n","status":"published","published":"2024-06-07T21:39:43Z","modified":"2024-06-07T21:39:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:33.520522Z"},{"id":"GHSA-2x36-qhx3-7m5f","title":"ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select","description":"The implementation of the ORDER BY SQL statement in Zend_Db_Select of Zend Framework 1 contains a potential SQL injection when the query string passed contains parentheses.\n\nFor instance, the following code is affected by this issue:\n```\n$db     = Zend_Db::factory( /* options here */ );\n$select = $db-\u003eselect()\n    -\u003efrom(array('p' =\u003e 'products'))\n    -\u003eorder('MD5(1); drop table products');\necho $select;\n```\nThis code produce the string:\n```\nSELECT \"p\".* FROM \"products\" AS \"p\" ORDER BY MD5(1);drop table products ASC\n```\ninstead of the correct one:\n```\nSELECT \"p\".* FROM \"products\" AS \"p\" ORDER BY \"MD5(1);drop table products\" ASC\n```\nThe SQL injection occurs because we create a new Zend_Db_Expr() object, in presence of parentheses, passing directly the value without any filter on the string.","status":"published","published":"2024-06-07T22:24:52Z","modified":"2024-12-04T05:39:35.461646Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:35.050232Z"},{"id":"GHSA-9v78-h226-2rmq","title":"Zendframework potential security issue in login mechanism","description":"Using the Consumer component of ZendOpenId (or Zend_OpenId in ZF1), it is possible to login using an arbitrary OpenID account (without knowing any secret information) by using a malicious OpenID Provider. That means OpenID it is possible to login using arbitrary OpenID Identity (MyOpenID, Google, etc), which are not under the control of our own OpenID Provider. Thus, we are able to impersonate any OpenID Identity against the framework.\n\nMoreover, the Consumer accepts OpenID tokens with arbitrary signed elements. The framework does not check if, for example, both openid.claimed_id and openid.endpoint_url are signed. It is just sufficient to sign one parameter. According to https://openid.net/specs/openid-authentication-2_0.html#positive_assertions, at least op_endpoint, return_to, response_nonce, assoc_handle, and, if present in the response, claimed_id and identity, must be signed.","status":"published","published":"2024-06-07T22:24:08Z","modified":"2024-12-04T05:30:41.11192Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:44.225359Z"},{"id":"GHSA-g52p-86j5-xr8q","title":"ZendFramework Potential Cross-site Scripting in Development Environment Error View Script","description":"The default error handling view script generated using `Zend_Tool` failed to escape request parameters when run in the \"development\" configuration environment, providing a potential XSS attack vector.\n\n`Zend_Tool_Project_Context_Zf_ViewScriptFile` was patched such that the view script template now calls the `escape()` method on dumped request variables.\n\nZend Framework 1.11.4 includes a patch that adds escaping to the generated error/error.phtml view script, ensuring that request variables are escaped appropriately for the browser.\nDo note, however, that this will not update any previously generated code. You will still need to follow the next advice for previously generated error view scripts.","status":"published","published":"2024-06-07T21:20:39Z","modified":"2024-06-07T21:20:39Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:47.119724Z"},{"id":"GHSA-gff2-p6vm-3p8g","title":"ZendFramework potential remote code execution in zend-mail via Sendmail adapter","description":"When using the zend-mail component to send email via the `Zend\\Mail\\Transport\\Sendmail transport`, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they can be interpreted as additional command line arguments, leading to the vulnerability.\n\n","status":"published","published":"2024-06-07T20:47:30Z","modified":"2024-12-04T05:39:06.67482Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:46:47.822182Z"},{"id":"GHSA-mhpx-3rv8-wrjm","title":"ZendFramework potential XML eXternal Entity injection vectors","description":"Numerous components utilizing PHP's `DOMDocument`, `SimpleXML`, and `xml_parse` functionality are vulnerable to two types of attacks:\n\n- XML eXternal Entity (XXE) Injection attacks. The above mentioned extensions are insecure by default, allowing external entities to be specified by adding a specific DOCTYPE element to XML documents and strings. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.\n- XML Entity Expansion (XEE) vectors, leading to Denial of Service vectors. XEE attacks occur when the XML DOCTYPE declaration includes XML entity definitions that contain either recursive or circular references; this leads to CPU and memory consumption, making Denial of Service exploits trivial to implement.\n","status":"published","published":"2024-06-07T21:16:36Z","modified":"2024-12-04T05:32:07.571126Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611","CWE-776"],"updated_at":"2026-11-02T15:46:51.811331Z"},{"id":"CLSA-2026-1787038633","title":"TuxCare security update for zendframework/zendframework1 (10 CVEs)","description":"TuxCare rebuilt zendframework/zendframework1 to address 10 CVEs. Fixed in 1.11.0-p2+tuxcare.","status":"published","published":"2026-08-18T07:37:13Z","modified":"2026-10-15T09:48:00.241242105Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787781004","title":"TuxCare security update for zendframework/zendframework1 (5 CVEs)","description":"TuxCare rebuilt zendframework/zendframework1 to address 5 CVEs. Fixed in 1.10.6-p3+tuxcare.","status":"published","published":"2026-08-26T21:50:04Z","modified":"2026-10-15T09:48:00.349492426Z","updated_at":"2026-11-02T15:43:47.591214Z"}]}}