CLSA-2026-1789456930 TuxCare security update for laminas/laminas-diactoros (2 CVEs)

TuxCare rebuilt laminas/laminas-diactoros to address 2 CVEs. Fixed in 1.8.7p2-1+tuxcare...

PT-2026-98449

TuxCare rebuilt laminas/laminas-diactoros to address 2 CVEs. Fixed in 1.8.7p2-1+tuxcare...

CLSA-2026-1781052745 TuxCare security update for laminas/laminas-diactoros (1 CVE)

TuxCare rebuilt laminas/laminas-diactoros to address 1 CVE. Fixed in 2.22.0-p1+tuxcare...

PT-2026-74999

TuxCare rebuilt laminas/laminas-diactoros to address 1 CVE. Fixed in 2.22.0-p1+tuxcare...

WS-2022-0124

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

WS-2018-0158

URL Rewrite vulnerability in zendframework which is exist in projects zend-diactoros before version 1.8.4, in zend-http before version 2.8.1 and in zend-feed before version 2.10.3. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a...

EUVD-2022-6288

Malicious code in bioql PyPI...

EUVD-2022-5171

Malicious code in bioql PyPI...

EUVD-2023-1431

Malicious code in bioql PyPI...

URL Rewrite

zendframework/zend-diactoros is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content...

Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-FQ4P-86HH-42V9 Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-JMMP-VH96-78RM Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-CG8W-5JRC-675G Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

PT-2024-40349

Name of the Vulnerable Software and Affected Versions zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description The issue concerns a potential URL rewrite exploit in the mentioned software components. It involves...

PT-2024-40276

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40271

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40246

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It allows...