zoneminder/web/api
Isaac Connor 4a730d6934 fix: remove vulnerable phpunit dev dependency (CVE-2026-24765)
Remove phpunit/phpunit from require-dev in web/api/composer.json.
The pinned ^3.7 version is vulnerable to unsafe deserialization in
PHPT code coverage handling. Since ZoneMinder does not run CakePHP
unit tests in CI, the dependency is unused.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-11 21:59:03 -05:00
..
app feat: add User Roles feature for reusable permission templates 2026-01-29 13:34:27 -05:00
lib/Cake Upgrade cakephp to 2.10.24 2021-03-31 12:11:12 -04:00
.editorconfig Moved the api to underneath the web directory 2014-04-29 20:41:04 +00:00
CMakeLists.txt Update CMakeLists.txt 2017-05-03 12:35:54 -05:00
CONTRIBUTING.md Upgrade cakephp to 2.10.24 2021-03-31 12:11:12 -04:00
README.md Text corrections 2023-08-27 02:00:59 +02:00
build.properties Upgrade cakephp to 2.10.24 2021-03-31 12:11:12 -04:00
build.xml Upgrade cakephp to 2.10.24 2021-03-31 12:11:12 -04:00
composer.json fix: remove vulnerable phpunit dev dependency (CVE-2026-24765) 2026-02-11 21:59:03 -05:00
index.php Upgrade cakephp to 2.10.24 2021-03-31 12:11:12 -04:00

README.md

ZoneMinder API

This is the ZoneMinder API. It should be, for now, installed under the webroot e.g. /api.

app/Config/database.php.default must be configured and copied to app/Config/database.php

In addition, Security.salt and Security.cipherSeed in app/Config/core.php should be changed.

The API can run on a dedicated / separate instance, so long as it can access the database as configured in app/Config/database.php