guzzlehttp/guzzle vulnerabilities (TuxCare)
14 vulnerabilities.
-
guzzlehttp/guzzleTuxCare Guzzle: Noncanonical host can bypass host-based checks 7.2 High -
guzzlehttp/guzzleTuxCare Guzzle: Noncanonical cookie domain keeps subdomain scope 6.5 Medium -
guzzlehttp/guzzleTuxCare guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer 8.2 High -
guzzlehttp/guzzleTuxCare guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope 8.2 High -
guzzlehttp/guzzleTuxCare guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service 6.9 Medium -
guzzlehttp/guzzleTuxCare guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure 6.9 Medium -
guzzlehttp/guzzleTuxCare Guzzle: Cookie Disclosure and Injection via IP-Address Domains 4.7 Medium -
guzzlehttp/guzzleTuxCare Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle 5.8 Medium -
guzzlehttp/guzzleTuxCare Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 5.9 Medium -
guzzlehttp/guzzleTuxCare Change in port should be considered a change in origin in Guzzle 7.7 High -
guzzlehttp/guzzleTuxCare CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 7.7 High -
guzzlehttp/guzzleTuxCare Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
guzzlehttp/guzzleTuxCare Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
guzzlehttp/guzzleTuxCare Cross-domain cookie leakage in Guzzle 8.0 High