CLSA-2026-1783299704 TuxCare security update for zendframework/zend-http (1 CVE)

TuxCare rebuilt zendframework/zend-http to address 1 CVE. Fixed in 2.5.6-p2+tuxcare...

PT-2026-74796

TuxCare rebuilt zendframework/zend-http to address 1 CVE. Fixed in 2.5.6-p1+tuxcare...

PT-2026-75301

TuxCare rebuilt zendframework/zend-http to address 1 CVE. Fixed in 2.5.6-p2+tuxcare...

Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-JMMP-VH96-78RM Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-CG8W-5JRC-675G Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

PT-2024-40246

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It allows...

PT-2024-40271

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40276

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40349

Name of the Vulnerable Software and Affected Versions zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description The issue concerns a potential URL rewrite exploit in the mentioned software components. It involves...

URL Rewrite vulnerability in multiple zendframework components

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

PT-2022-28239

Name of the Vulnerable Software and Affected Versions zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description The issue concerns a potential URL rewrite exploit in the mentioned software components. It involves...

Daniel Fahlke magento-lts 代码问题漏洞

Magento lts is a long term support alternative to Magento Community Edition CE. A code issue vulnerability exists in Magento lts. The vulnerability exists due to insufficient validation of the stream name in "lib Zend Http Response stream .php". A remote attacker could use this vulnerability to...

Fedora Update for php-zendframework-zend-http FEDORA-2018-71e9650fa9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: php-zendframework-zend-http-2.8.1-1.fc28

Zend\Http is a primary foundational component of Zend Framework. Since much of what PHP does is web-based, specifically HTTP, it makes sense to have a performant, extensible, concise and consistent API to do all things HTTP. Documentation: https://zendframework.github.io/zend-http/...