phpwarden
FeaturesComparePricingAdvisoriesBlogDocsChangelogLog in
Log inStart free

ZF2018-01: URL Rewrite vulnerability

unknown Affects zendframework/zend-diactoros, zendframework/zend-feed, zendframework/zend-http, zendframework/zendframework. Feed 2026.10.29.1, updated 2026-10-28.

URL Rewrite vulnerability

Package
zendframework/zend-diactoros Composer
Affected versions
>=1.0.0 and <1.8.4
Fixed in
1.8.4
Severity
unknown
Exploitation
not on CISA KEV
Source
friendsofphp

References

URL Rewrite vulnerability

Package
zendframework/zend-feed Composer
Affected versions
>=1.0.0 and <2.10.3
Fixed in
2.10.3
Severity
unknown
Exploitation
not on CISA KEV
Source
friendsofphp

References

URL Rewrite vulnerability

Package
zendframework/zend-http Composer
Affected versions
>=1.0.0 and <2.8.1
Fixed in
2.8.1
Severity
unknown
Exploitation
not on CISA KEV
Source
friendsofphp

References

URL Rewrite vulnerability

Package
zendframework/zendframework Composer
Affected versions
<2.5.0
Fixed in
2.5.0
Severity
unknown
Exploitation
not on CISA KEV
Source
friendsofphp

References

NVD recordzendframework/zend-diactoros advisorieszendframework/zend-feed advisorieszendframework/zend-http advisorieszendframework/zendframework advisories

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs   How findings are ranked

Related advisories