Skip to content
Guzzlephp Guzzle vulnerabilities
-
guzzle
Guzzle: Cookie Disclosure and Injection via IP-Address Domains
CVE-2026-59883
Fix available
4.7 Medium
-
guzzle
Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
CVE-2026-55767
Fix available
5.8 Medium
-
guzzle
Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
CVE-2026-55568
Fix available
5.9 Medium
-
guzzle, debian linux +1 more
Change in port should be considered a change in origin in Guzzle
CVE-2022-31091
Fix available
7.7 High
-
guzzle, debian linux +1 more
CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle
CVE-2022-31090
Fix available
7.7 High
-
guzzle, debian linux, drupal +2 more
Fix failure to strip Authorization header on HTTP downgrade in Guzzle
CVE-2022-31043
Fix available
7.5 High
-
guzzle, debian linux, drupal +2 more
Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
CVE-2022-31042
Fix available
7.5 High
-
guzzle, debian linux, drupal +2 more
Cross-domain cookie leakage in Guzzle
CVE-2022-29248
Fix available
8.0 High