Vendors / laminas Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now laminas records in CISA KEV No laminas vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zen…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.75313 · Published 2021-01-04 · Fixed in 2.14.2 CWE-502
Priority MEDIUM 41
Laminas Diactoros provides PSR HTTP Message implementations.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00965 · Published 2023-04-24 · Fixed in 2.18.1, 2.19.1 +6 CWE-20
Priority LOW 39
laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00796 · Published 2022-08-01 · Fixed in 2.11.1 CWE-444
Priority LOW 29
laminas-form is a package for validating and displaying simple and complex forms.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00989 · Published 2022-01-28 · Fixed in 3.1.1, 3.0.2 +1 CWE-79
Open these records in search → All records by CVSS severity
1 2 1 0 0
