guzzle vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 20231
3. 20251
4. 202614

Newest CVEs

• CVE-2026-69246

  Guzzle: Noncanonical host can bypass host-based checks

  guzzle · guzzle

  High7.2
• CVE-2026-69245

  Guzzle: Noncanonical cookie domain keeps subdomain scope

  guzzle · guzzle

  Medium6.5
• CVE-2026-67354

  guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer

  guzzle · guzzle

  High8.2
• CVE-2026-67355

  guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

  guzzle · guzzle

  High8.2
• CVE-2026-67353

  guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service

  guzzle · guzzle

  Medium6.9
• CVE-2026-67339

  guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure

  guzzle · guzzle

  Medium6.9
• CVE-2026-59883

  Guzzle: Cookie Disclosure and Injection via IP-Address Domains

  guzzle · guzzle

  Medium4.7
• CVE-2026-59882

  guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

  guzzle · psr7

  Medium4.2
• CVE-2026-55766

  guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization

  guzzle · psr7

  Medium4.8
• CVE-2026-55767

  Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle

  guzzle · guzzle

  Medium5.8