Gguzzle

Products

Exploited and recent CVEs

• CVE-2026-69246 High 7.2 Guzzle: Noncanonical host can bypass host-based checks 0.4%
• CVE-2026-69245 Medium 6.5 Guzzle: Noncanonical cookie domain keeps subdomain scope 0.2%
• CVE-2026-67354 Medium 5.9 guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer 0.4%
• CVE-2026-67355 Medium 5.9 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope 0.4%
• CVE-2026-67353 Medium 5.3 guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service 0.4%
• CVE-2026-67339 Medium 5.3 guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure 0.4%
• CVE-2026-59883 Medium 4.7 Guzzle: Cookie Disclosure and Injection via IP-Address Domains 0.2%
• CVE-2026-59882 Medium 4.2 guzzlehttp/psr7: Host Confusion via Weak URI Host Validation 0.3%
• CVE-2026-55766 Medium 4.8 guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization 0.2%
• CVE-2026-55767 Medium 5.8 Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle 0.2%
• CVE-2026-55568 Medium 5.9 Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 0.1%
• CVE-2026-53723 Medium 5.8 guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator 0.2%
• CVE-2026-49214 Medium 5.3 guzzlehttp/psr7 has CRLF Injection via URI Host Component 0.2%
• CVE-2026-48998 Medium 5.3 guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation 0.2%
• CVE-2025-21617 Medium 6.3 Guzzle OAuth Subscriber has insufficient nonce entropy 0.5%
• CVE-2023-29197 Medium 5.3 Improper header name validation in guzzlehttp/psr7 1.2%
• CVE-2022-31090 High 7.7 CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 1.9%
• CVE-2022-31091 High 7.7 Change in port should be considered a change in origin in Guzzle 1.6%
• CVE-2022-31043 High 7.5 Fix failure to strip Authorization header on HTTP downgrade in Guzzle 2.0%
• CVE-2022-31042 High 7.5 Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 2.0%
• CVE-2022-29248 High 8.0 Cross-domain cookie leakage in Guzzle 1.4%
• CVE-2022-24775 High 7.5 Improper Input Validation in guzzlehttp/psr7 2.5%