Zumba vulnerabilities
We track 1 vulnerability in Zumba products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Zumba vulnerabilities
- 8.1 High severity
json-serializer: Deserialization of Untrusted Data
Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type f