CLSA-2026-1790350388 TuxCare security update for zendframework/zend-session (1 CVE)

TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p2+tuxcare...

PT-2026-106048

TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p2+tuxcare...

CLSA-2026-1789376005 TuxCare security update for zendframework/zend-session (1 CVE)

TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

PT-2026-97769

TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

Zend-Session session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

GHSA-96C6-M98X-HXJX Zend-Session session validation vulnerability

Zend\Session session validators do not work as expected if set prior to the start of a session. For instance, the following test case fails where $this-manager is an instance of Zend\Session\SessionManager: $this -manager -getValidatorChain -attach'session.validate', arraynew RemoteAddr, 'isValid...

PT-2024-40109

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them to not work as expected. This allows an attacker to bypass session validators...

PT-2024-40212

Name of the Vulnerable Software and Affected Versions: Zend Session affected versions not specified Description: The issue arises when ZendSession session validators are set before the start of a session, causing them not to work as expected. This allows an attacker to bypass session validators...