Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.5 CVE-2026-59882 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not reject URI host components co… Psr 7 2.12.3+ Fix from $1,6002026-07-08 MEDIUM 6.1 CVE-2026-59883 Guzzle is an extensible PHP HTTP client. Prior to 7.12.3, CookieJar did not restrict cookies scoped to IP-address or bare-numeric Domain values to th… Guzzle 7.12.3+ Fix from $1,6002026-07-08 MEDIUM 5.8 CVE-2026-55767 Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar incorrectly accepts cookies with a dot-only Domain attribute and whitespace-padde… Guzzle 7.12.1+ Fix from $1,6002026-06-23 MEDIUM 5.9 CVE-2026-55568 Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, in certain configurations, traffic expected to be protected by TLS on the hop to the proxy … Guzzle 7.12.1+ Fix from $1,6002026-06-23 MEDIUM 5.3 CVE-2026-48998 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing … Psr 7 2.10.2+ Fix from $1,6002026-06-11 MEDIUM 5.3 CVE-2026-49214 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not reject ASCII control characters, whitespace, … Psr 7 2.10.2+ Fix from $1,6002026-06-11