guzzlehttp/guzzle vulnerabilities (Packagist)
15 vulnerabilities.
-
guzzlehttp/guzzlePackagist Guzzle: Noncanonical host can bypass host-based checks 7.2 High -
guzzlehttp/guzzlePackagist Guzzle: Noncanonical cookie domain keeps subdomain scope 6.5 Medium -
guzzlehttp/guzzlePackagist guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer 8.2 High -
guzzlehttp/guzzlePackagist guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope 8.2 High -
guzzlehttp/guzzlePackagist guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service 6.9 Medium -
guzzlehttp/guzzlePackagist guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure 6.9 Medium -
guzzlehttp/guzzlePackagist Guzzle: Cookie Disclosure and Injection via IP-Address Domains 4.7 Medium -
guzzlehttp/guzzlePackagist Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle 5.8 Medium -
guzzlehttp/guzzlePackagist Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 5.9 Medium -
guzzlehttp/guzzlePackagist Change in port should be considered a change in origin in Guzzle 7.7 High -
guzzlehttp/guzzlePackagist CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 7.7 High -
guzzlehttp/guzzlePackagist Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
guzzlehttp/guzzlePackagist Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
guzzlehttp/guzzlePackagist Cross-domain cookie leakage in Guzzle 8.0 High -
guzzlehttp/guzzlePackagist HTTP Proxy header vulnerability 8.1 High