psr7 vulnerabilities

2 known vulnerabilities in psr7 from Guzzle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  psr7: Interpretation Conflict

  CVE-2023-29197Apr 17, 2023GuzzleEPSS 1.22%

  guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is us

• 7.5 High severity

  guzzlehttp/psr7 is a PSR-7 HTTP message library.

  CVE-2022-24775Mar 21, 2022GuzzleEPSS 2.48%

  guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currentl