guzzle vulnerabilities (Ubuntu)
12 vulnerabilities.
-
guzzleUbuntu Guzzle: Noncanonical host can bypass host-based checks 7.2 High -
guzzleUbuntu Guzzle: Noncanonical cookie domain keeps subdomain scope 6.5 Medium -
guzzleUbuntu guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer 8.2 High -
guzzleUbuntu guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope 8.2 High -
guzzleUbuntu guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service 6.9 Medium -
guzzleUbuntu guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure 6.9 Medium -
guzzleUbuntu Guzzle: Cookie Disclosure and Injection via IP-Address Domains 4.7 Medium -
guzzleUbuntu Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle 5.8 Medium -
guzzleUbuntu Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext 5.9 Medium -
guzzleUbuntu Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
guzzleUbuntu Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
guzzleUbuntu Cross-domain cookie leakage in Guzzle 8.0 High