TI-2022-13088 CVE-2022-31043 · GHSA-w248-ffj2-4v5q
Fix failure to strip Authorization header on HTTP downgrade in Guzzle
Priority MEDIUM 43
Guzzle is an open source PHP HTTP client.
guzzle
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
guzzle records in CISA KEVNo guzzle vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Guzzle · all components
TI-2022-13087 CVE-2022-31042 · GHSA-f2wf-25xc-69c9
Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
Priority MEDIUM 43
Guzzle is an open source PHP HTTP client.
TI-2022-11789 CVE-2022-29248 · GHSA-cwmx-hcrq-mhc3
Cross-domain cookie leakage in Guzzle
Priority MEDIUM 40
Guzzle is a PHP HTTP client.
TI-2022-13135 CVE-2022-31091 · GHSA-q559-8m2m-g699
Change in port should be considered a change in origin in Guzzle
Priority LOW 37
Guzzle, an extensible PHP HTTP client.
TI-2022-13134 CVE-2022-31090 · GHSA-25mq-v84q-4j7r
CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle
Priority LOW 37
Guzzle, an extensible PHP HTTP client.
TI-2026-40256 CVE-2026-55767 · GHSA-cwxw-98qj-8qjx
Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
Priority LOW 31
Guzzle is an extensible PHP HTTP client.
TI-2026-42697 CVE-2026-59883 · GHSA-g446-98w2-8p5w
Guzzle: Cookie Disclosure and Injection via IP-Address Domains
Priority LOW 26
Guzzle is an extensible PHP HTTP client.
TI-2026-40109 CVE-2026-55568 · GHSA-wpwq-4j6v-78m3
Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
Priority LOW 25
Guzzle is an extensible PHP HTTP client.