CLSA-2026-1787781004 TuxCare security update for zendframework/zendframework1 (5 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 5 CVEs. Fixed in 1.10.6-p3+tuxcare...

PT-2026-86462

TuxCare rebuilt zendframework/zendframework1 to address 5 CVEs. Fixed in 1.10.6-p3+tuxcare...

CLSA-2026-1787582780 TuxCare security update for zendframework/zendframework1 (6 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 6 CVEs. Fixed in 1.11.0-p4+tuxcare...

PT-2026-85134

TuxCare rebuilt zendframework/zendframework1 to address 6 CVEs. Fixed in 1.11.0-p4+tuxcare...

CLSA-2026-1787221779 TuxCare security update for zendframework/zendframework1 (1 CVE)

TuxCare rebuilt zendframework/zendframework1 to address 1 CVE. Fixed in 1.10.6-p2+tuxcare...

CLSA-2026-1787214807 TuxCare security update for zendframework/zendframework1 (1 CVE)

TuxCare rebuilt zendframework/zendframework1 to address 1 CVE. Fixed in 1.11.0-p3+tuxcare...

PT-2026-83595

TuxCare rebuilt zendframework/zendframework1 to address 1 CVE. Fixed in 1.10.6-p2+tuxcare...

PT-2026-83534

TuxCare rebuilt zendframework/zendframework1 to address 1 CVE. Fixed in 1.11.0-p3+tuxcare...

CLSA-2026-1787157563 TuxCare security update for zendframework/zendframework1 (23 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 23 CVEs. Fixed in 1.10.6-p1+tuxcare...

PT-2026-83480

TuxCare rebuilt zendframework/zendframework1 to address 23 CVEs. Fixed in 1.10.6-p1+tuxcare...

CLSA-2026-1787038633 TuxCare security update for zendframework/zendframework1 (10 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 10 CVEs. Fixed in 1.11.0-p2+tuxcare...

PT-2026-83038

TuxCare rebuilt zendframework/zendframework1 to address 10 CVEs. Fixed in 1.11.0-p2+tuxcare...

CLSA-2026-1786712695 TuxCare security update for zendframework/zendframework1 (12 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 12 CVEs. Fixed in 1.11.0-p1+tuxcare...

PT-2026-80934

TuxCare rebuilt zendframework/zendframework1 to address 12 CVEs. Fixed in 1.11.0-p1+tuxcare...

CLSA-2026-1777855982 TuxCare security update for zendframework/zendframework1 (7 CVEs)

TuxCare rebuilt zendframework/zendframework1 to address 7 CVEs. Fixed in 1.12.10-p2+tuxcare...

PT-2026-73775

TuxCare rebuilt zendframework/zendframework1 to address 7 CVEs. Fixed in 1.12.10-p1+tuxcare...

PT-2026-74671

TuxCare rebuilt zendframework/zendframework1 to address 7 CVEs. Fixed in 1.12.10-p2+tuxcare...

SQL Injection

zendframework/zendframework1 is vulnerable to SQL Injection. The vulnerability is due to the improper handling of SQL expressions and comments in the ORDER BY and GROUP BY clauses. Attackers can exploit this vulnerability by injecting malicious SQL code that can alter the intended SQL query and...

GHSA-6FQW-J3VM-7F66 Zendframework1 Potential SQL injection in ORDER and GROUP functions

The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the statement to ensur...

ZendFramework1 Potential Insufficient Entropy Vulnerability

We discovered several methods used to generate random numbers in ZF1 that potentially used insufficient entropy. These random number generators are used in the following method calls: ZendLdapAttribute::createPassword ZendFormElementHash::generateHash ZendGdataHttpClient::filterHttpRequest...