CyberSecBulletin

Guzzlephp vulnerabilities

We track 2 vulnerabilities in Guzzlephp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2023.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Guzzlephp vulnerabilities

  • 7.5 High severity

    psr7: Interpretation Conflict

    CVE-2023-29197GuzzleEPSS 1.22%

    guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is us

  • 7.5 High severity

    guzzlehttp/psr7 is a PSR-7 HTTP message library.

    CVE-2022-24775GuzzleEPSS 2.48%

    guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currentl