CLSA-2026-1789457016 TuxCare security update for zendframework/zend-form (1 CVE)

TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

PT-2026-98451

TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

Cross Site Scripting (XSS)

zendframework/zend-form is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the use of the escapeHtml helper instead of escapeHtmlAttr, leading to improper escaping of HTML attributes. An attacker can exploit this by injecting malicious code through user data or JavaScript in...

PT-2024-40320

Name of the Vulnerable Software and Affected Versions Zend Framework affected versions not specified Description The issue concerns character encoding inconsistencies in several Zend Framework components, including Zend Form, Zend Filter, Zend Log, and Zend View. Specifically, the htmlspecialchar...