Zend Framework — Reporting Potential Security Issues

If you have encoun­tered a poten­tial secu­rity vul­ner­a­bil­ity in Zend Frame­work, please report it to us at zf-security@zend.com. We will work with you to ver­ify the vul­ner­a­bil­ity and patch it. When report­ing issues, please pro­vide the fol­low­ing infor­ma­tion: Component(s) affected A descrip­tion indi­cat­ing how to repro­duce the issue A sum­mary of the secu­rity vul­ner­a­bil­ity and impact We […]

Zend Framework Security Related Releases Now Available

And finally there has been some actual move­ment on secur­ing up the Zend Frame­work in an proac­tive fash­ion (at least from now on:) )

As announced ear­lier by Matthew, Zend Frame­work 1.9.7, 1.8.5 and 1.7.9 have been released incor­po­rat­ing rou­tine main­te­nance and a num­ber of secu­rity fixes detailed in the announce­ment. It's rec­om­mended that frame­work users upgrade as soon as pos­si­ble to the lat­est release of whichever of these minor branches they are using.