Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Zend Session component may allow code execution
published 1 month ago
Summary
The Zend Session library used in your application has a weakness that could let an attacker run unauthorized code on the server. This risk is fixed in version 2.1.6-p1+tuxcare, so update the library to that version or later as soon as possible.
What to do
- Update zendframework zendframework/zend-session to version 2.1.6-p1+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Packagist | zendframework | zendframework/zend-session |
< 2.1.6-p1+tuxcare Fix: upgrade to 2.1.6-p1+tuxcare
|
Original advisory text
TuxCare security update for zendframework/zend-session (1 CVE)
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p1+tuxcare.
Timeline
Published14 Sep 2026
Updated15 Sep 2026
First seen15 Sep 2026
Sources
CLSA-2026-1789376005 · OSV
Track software like this
Free during beta