CLSA-2026-1789384773 TuxCare security update for zendframework/zend-view (1 CVE)

TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

PT-2026-98177

TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

Cross-site Scripting (XSS)

zendframework/zend-view is vulnerable to cross-site scripting XSS. The vulnerability is due to many view helpers using escapeHtml instead of the more appropriate escapeHtmlAttr for escaping HTML attributes, which can lead to potential XSS attack vectors when user data and/or JavaScript is used to...

PT-2024-40335

Name of the Vulnerable Software and Affected Versions Zend View versions up to and including 1.7.4 Description The issue concerns a Local File Inclusion problem. If untrusted input is used to specify the script path and/or view script, a malicious attacker could potentially specify a system...

PT-2024-40320

Name of the Vulnerable Software and Affected Versions Zend Framework affected versions not specified Description The issue concerns character encoding inconsistencies in several Zend Framework components, including Zend Form, Zend Filter, Zend Log, and Zend View. Specifically, the htmlspecialchar...