Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-v5mv-p594-2x33
  • Packagist/guzzlehttp/guzzle
 Guzzle: Noncanonical host can bypass host-based checks 03 Aug
  • Fix available
  • Severity - 7.2 (High)
GHSA-f7vp-7xgx-4w4r
  • Packagist/guzzlehttp/guzzle
 Guzzle: Noncanonical cookie domain keeps subdomain scope 03 Aug
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-h95v-h523-3mw8
  • Packagist/guzzlehttp/guzzle
 Guzzle: URI fragments disclosed in redirect Referer headers 20 Jul
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wm3w-8rrp-j577
  • Packagist/guzzlehttp/guzzle
 Guzzle: Host-only cookie scope is not preserved 20 Jul
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-f283-ghqc-fg79
  • Packagist/guzzlehttp/guzzle
 Guzzle: Unbounded response cookies risk denial of service 20 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-g446-98w2-8p5w
  • Packagist/guzzlehttp/guzzle
 Guzzle: Cookie Disclosure and Injection via IP-Address Domains 20 Jul
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-94pj-82f3-465w
  • Packagist/guzzlehttp/guzzle
 Guzzle: Proxy-Authorization headers can be sent to origin servers 20 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-cwxw-98qj-8qjx
  • Packagist/guzzlehttp/guzzle
 guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts 19 Jun
  • Fix available
  • Severity - 5.8 (Medium)
GHSA-wpwq-4j6v-78m3
  • Packagist/guzzlehttp/guzzle
 guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 19 Jun
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-q559-8m2m-g699
  • Packagist/guzzlehttp/guzzle
 Change in port should be considered a change in origin 21 Jun 2022
  • Fix available
  • Severity - 7.7 (High)
GHSA-25mq-v84q-4j7r
  • Packagist/guzzlehttp/guzzle
 CURLOPT_HTTPAUTH option not cleared on change of origin 21 Jun 2022
  • Fix available
  • Severity - 7.7 (High)
GHSA-f2wf-25xc-69c9
  • Packagist/guzzlehttp/guzzle
 Failure to strip the Cookie header on change in host or HTTP downgrade 09 Jun 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-w248-ffj2-4v5q
  • Packagist/guzzlehttp/guzzle
 Fix failure to strip Authorization header on HTTP downgrade 09 Jun 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-cwmx-hcrq-mhc3
  • Packagist/guzzlehttp/guzzle
 Cross-domain cookie leakage in Guzzle 25 May 2022
  • Fix available
  • Severity - 8.0 (High)
GHSA-m6ch-gg5f-wxx3
  • Packagist/amphp/artax
  • Packagist/bugsnag/bugsnag-laravel
  • Packagist/drupal/core
  • Packagist/guzzlehttp/guzzle
  • Packagist/padraic/humbug_get_contents
 HTTP Proxy header vulnerability 07 Apr 2022
  • Fix available
  • Severity - 8.1 (High)