guzzlehttp/guzzle
Guzzle is a PHP HTTP client library
Security Advisories for guzzlehttp/guzzle in packagist
High
3 months ago
Guzzle: Noncanonical host can bypass host-based checks
packagist
guzzlehttp/guzzle
Moderate
3 months ago
Guzzle: Noncanonical cookie domain keeps subdomain scope
packagist
guzzlehttp/guzzle
Moderate
3 months ago
Guzzle: URI fragments disclosed in redirect Referer headers
packagist
guzzlehttp/guzzle
Moderate
3 months ago
Guzzle: Unbounded response cookies risk denial of service
packagist
guzzlehttp/guzzle
Moderate
3 months ago
Guzzle: Cookie Disclosure and Injection via IP-Address Domains
packagist
guzzlehttp/guzzle
Moderate
3 months ago
Guzzle: Proxy-Authorization headers can be sent to origin servers
packagist
guzzlehttp/guzzle
Moderate
4 months ago
guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts
packagist
guzzlehttp/guzzle
Moderate
4 months ago
guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
packagist
guzzlehttp/guzzle
High
over 4 years ago
Change in port should be considered a change in origin
packagist
guzzlehttp/guzzle
High
over 4 years ago
CURLOPT_HTTPAUTH option not cleared on change of origin
packagist
guzzlehttp/guzzle
High
over 4 years ago
Failure to strip the Cookie header on change in host or HTTP downgrade
packagist
guzzlehttp/guzzle
High
over 4 years ago
Fix failure to strip Authorization header on HTTP downgrade
packagist
guzzlehttp/guzzle
High
over 4 years ago
HTTP Proxy header vulnerability
packagist
typo3/cms, drupal/drupal, bugsnag/bugsnag-laravel, amphp/artax, padraic/humbug_get_contents, drupal/core, guzzlehttp/guzzle