| Package | Affected versions | Patched versions |
|---|---|---|
| zendframework/zend-crypt | ≥ 2.0.0, < 2.4.9≥ 2.5.0, < 2.5.2 | 2.4.92.5.2 |
| zendframework/zendframework | ≥ 2.0.0, < 2.4.9≥ 2.5.0, < 2.5.2 | 2.4.92.5.2 |
| zend framework | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.5.0= 2.5.1 |
Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free