Packagist zendframework/zendframework1

Name: Packagist zendframework/zendframework1
Brand: Packagist

productUS

pkg:composer/zendframework/zendframework1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

4critical1high9medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-3363US	critical9.1	49.3% (99th)	Exploit	1.12.0	2013-02-13	2 versions
CVE-2015-5161US	medium6.8	9.87% (96th)	Exploit	1.12.14	2015-08-25	1.12.0 → 1.12.14
CVE-2015-7695US	critical9.8	2.89% (87th)	—	1.12.16	2016-06-07	< 1.12.16
CVE-2014-2681US	medium6.4	2.59% (85th)	—	1.12.4	2014-11-16	< 1.12.4
CVE-2014-8089US	critical9.8	2.55% (85th)	—	1.12.9	2020-02-17	1.12.0 → 1.12.9
CVE-2012-6531US	medium6.4	2.52% (85th)	—	1.11.13	2013-02-13	2 versions
CVE-2014-8088US	medium5.0	2.50% (85th)	—	1.12.9	2014-10-22	1.12.0 → 1.12.9
CVE-2014-2683US	medium5.0	2.35% (84th)	—	1.12.4	2014-11-16	< 1.12.4
CVE-2014-2682US	medium6.8	2.18% (82nd)	—	1.12.4	2014-11-16	< 1.12.4
CVE-2016-6233US	critical9.8	2.05% (81st)	—	1.12.19	2017-02-17	< 1.12.19
CVE-2012-6532US	medium5.0	1.85% (79th)	—	1.11.13	2013-02-13	2 versions
CVE-2012-5657US	medium5.0	1.70% (77th)	—	1.11.15	2013-05-02	2 versions
CVE-2015-3154US	medium6.1	1.01% (63rd)	—	1.12.12	2020-01-27	< 1.12.12
CVE-2015-5723US	high7.8	0.38% (32nd)	—	1.12.16	2016-06-07	1.12.0 → 1.12.16

The flaw types (CWEs) most of these CVEs share.

CWE-611Improper Restriction of XML External Entity Reference6 CVEs
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-19CWE-192 CVEs
CWE-17CWE-171 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.