Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-json

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    Zend-JSON vulnerable to XXE/XEE attacks

    Numerous components utilizing PHP's DOMDocument, SimpleXML, and xml_parse functionality are vulnerable to two types of attacks: - XML eXternal Entity (XXE) Injection attacks. The above mentioned extensions are insecure by default, allowing external entities t…