guzzle vulnerabilities (Debian)
14 vulnerabilities.
-
guzzleDebian Guzzle: Noncanonical host can bypass host-based checks 7.2 High -
guzzleDebian Guzzle: Noncanonical cookie domain keeps subdomain scope 6.5 Medium -
guzzleDebian guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer 8.2 High -
guzzleDebian guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope 8.2 High -
guzzleDebian guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service 6.9 Medium -
guzzleDebian guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure 6.9 Medium -
guzzleDebian Guzzle: Cookie Disclosure and Injection via IP-Address Domains 4.7 Medium -
guzzleDebian Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle 5.8 Medium -
guzzleDebian Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 5.9 Medium -
guzzleDebian Change in port should be considered a change in origin in Guzzle 7.7 High -
guzzleDebian CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 7.7 High -
guzzleDebian Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
guzzleDebian Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
guzzleDebian Cross-domain cookie leakage in Guzzle 8.0 High