Known CVE

Laminas Project laminas-http - Remote Code Execution

Laminas Project laminas-http < 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by __destruct method in Zend\\Http\\Response\\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data.

CVE-2021-3007

Critical2021CVSS 9.8CWE-502

cve2021 · laminas · zend · rce · deserialization · vkev

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website