GU
Product
guzzle
14
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 8Low 0
Watch
Add guzzle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29248 | 8.1 | May 25 | Cross-domain cookie leakage in Guzzle Affected: < 6.5.6; >= 7.0.0, < 7.4.3 |
| CVE-2022-31091 | 7.7 | Jun 27 | Change in port should be considered a change in origin in Guzzle Affected: < 6.5.8; >=7.0.0, < 7.4.5 |
| CVE-2022-31090 | 7.7 | Jun 27 | CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle Affected: < 6.5.8; >=7.0.0, < 7.4.5 |
| CVE-2022-31042 | 7.5 | Jun 9 | Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle Affected: < 6.5.7; >=7.0.0, < 7.4.4 |
| CVE-2022-31043 | 7.5 | Jun 9 | Fix failure to strip Authorization header on HTTP downgrade in Guzzle Affected: < 6.5.7; >=7.0.0, < 7.4.4 |
| CVE-2026-69246 | 7.2 | Aug 3 | Guzzle: Noncanonical host can bypass host-based checks Affected: >= 8.0.0, < 8.0.1; < 7.15.2 |
Showing 6