Composer zendframework/zend-mail has 4 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2016-10034 | zend-mail remote code execution via Sendmail adapter | critical | 9.8 | <2.4.11 or >=2.5 and <=2.5.2 or >=2.6 and <=2.6.2 or >=2.7 and <2.7.2 | 2.4.11, 2.7.2 |
| CVE-2015-3154 | Potential CRLF injection attacks in mail and HTTP headers | unknown | 0.0 | >=2.0.0 and <2.0.99 or >=2.1.0 and <2.1.99 or >=2.3.0 and <2.3.8 or >=2.4.0 and <2.4.1 | 2.0.99, 2.1.99, 2.3.8, 2.4.1 |
| GHSA-cxf7-m5g2-v594 | Zend-Mail remote code execution in zend-mail via Sendmail adapter | high | 8.8 | >=2.0.0 and <2.4.11 or >=2.5.0 and <2.7.2 | 2.4.11, 2.7.2 |
| ZF2016-04 | Potential remote code execution in zend-mail via Sendmail adapter | unknown | 0.0 | >=2.0.0 and <2.1.0 or >=2.1.0 and <2.2.0 or >=2.2.0 and <2.3.0 or >=2.3.0 and <2.4.0 or >=2.4.0 and <2.4.11 or >=2.5.0 and <2.6.0 or >=2.6.0 and <2.7.0 or >=2.7.0 and <2.7.2 | 2.4.11, 2.7.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked