guzzlephp kayıtları
guzzlephp üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor5
- CWE-20 Improper Input Validation4
- CWE-346 Origin Validation Error2
- CWE-436 Interpretation Conflict2
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2022-29248İstismar yok | Cross-domain cookie leakage in Guzzleguzzlephp · guzzle · CWE-200 | Yüksek8,1 | — | %1,3 | 25 May 2022 |
31İzleyin | CVE-2022-24775İstismar yok | Improper Input Validation in guzzlehttp/psr7drupal · drupal · CWE-20 | Yüksek7,5 | — | %2,5 | 21 Mar 2022 |
31İzleyin | CVE-2022-31090İstismar yok | CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzleguzzlephp · guzzle · CWE-200 | Yüksek7,7 | — | %1,9 | 27 Haz 2022 |
31İzleyin | CVE-2022-31043İstismar yok | Fix failure to strip Authorization header on HTTP downgrade in Guzzleguzzlephp · guzzle · CWE-200 | Yüksek7,5 | — | %1,9 | 9 Haz 2022 |
31İzleyin | CVE-2022-31042İstismar yok | Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzleguzzlephp · guzzle · CWE-200 | Yüksek7,5 | — | %1,9 | 9 Haz 2022 |
30İzleyin | CVE-2022-31091İstismar yok | Change in port should be considered a change in origin in Guzzleguzzlephp · guzzle · CWE-200 | Yüksek7,7 | — | %1,5 | 27 Haz 2022 |
30İzleyin | CVE-2023-29197İstismar yok | Improper header name validation in guzzlehttp/psr7guzzlephp · psr-7 · CWE-436 | Yüksek7,5 | — | %1,2 | 17 Nis 2023 |
26İzleyin | CVE-2023-29530İstismar yok | Laminas Diactoros vulnerable to HTTP Multiline Header Terminationgetlaminas · laminas-diactoros · CWE-20 | Orta6,5 | — | %1,0 | 24 Nis 2023 |
26İzleyin | CVE-2026-59882İstismar yok | guzzlehttp/psr7: Host Confusion via Weak URI Host Validationguzzlephp · psr-7 · CWE-436 | Orta6,5 | — | %0,3 | 8 Tem 2026 |
24İzleyin | CVE-2026-59883İstismar yok | Guzzle: Cookie Disclosure and Injection via IP-Address Domainsguzzlephp · guzzle · CWE-346 | Orta6,1 | — | %0,2 | 8 Tem 2026 |
23İzleyin | CVE-2026-55767İstismar yok | Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzleguzzlephp · guzzle · CWE-346 | Orta5,8 | — | %0,2 | 23 Haz 2026 |
23İzleyin | CVE-2026-55568İstismar yok | Guzzle: Silent HTTPS-Proxy Downgrade to Cleartextguzzlephp · guzzle · CWE-311 | Orta5,9 | — | %0,1 | 23 Haz 2026 |
21İzleyin | CVE-2026-48998İstismar yok | guzzlehttp/psr7 has Host Confusion via Authority Reinterpretationguzzlephp · psr-7 · CWE-20 | Orta5,3 | — | %0,3 | 11 Haz 2026 |
21İzleyin | CVE-2026-49214İstismar yok | guzzlehttp/psr7 has CRLF Injection via URI Host Componentguzzlephp · psr-7 · CWE-20 | Orta5,3 | — | %0,3 | 11 Haz 2026 |
19İzleyin | CVE-2026-55766İstismar yok | guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serializationguzzlephp · psr-7 · CWE-93 | Orta4,8 | — | %0,2 | 23 Haz 2026 |
- CVE-2022-2924832İzleyin
Cross-domain cookie leakage in Guzzle
YüksekCVSS 8,1İstismar yokEPSS %1guzzlephp · guzzle25 May 2022
- CVE-2022-2477531İzleyin
Improper Input Validation in guzzlehttp/psr7
YüksekCVSS 7,5İstismar yokEPSS %2drupal · drupal21 Mar 2022
- CVE-2022-3109031İzleyin
CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle
YüksekCVSS 7,7İstismar yokEPSS %2guzzlephp · guzzle27 Haz 2022
- CVE-2022-3104331İzleyin
Fix failure to strip Authorization header on HTTP downgrade in Guzzle
YüksekCVSS 7,5İstismar yokEPSS %2guzzlephp · guzzle9 Haz 2022
- CVE-2022-3104231İzleyin
Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
YüksekCVSS 7,5İstismar yokEPSS %2guzzlephp · guzzle9 Haz 2022
- CVE-2022-3109130İzleyin
Change in port should be considered a change in origin in Guzzle
YüksekCVSS 7,7İstismar yokEPSS %2guzzlephp · guzzle27 Haz 2022
- CVE-2023-2919730İzleyin
Improper header name validation in guzzlehttp/psr7
YüksekCVSS 7,5İstismar yokEPSS %1guzzlephp · psr-717 Nis 2023
- CVE-2023-2953026İzleyin
Laminas Diactoros vulnerable to HTTP Multiline Header Termination
OrtaCVSS 6,5İstismar yokEPSS %1getlaminas · laminas-diactoros24 Nis 2023
- CVE-2026-5988226İzleyin
guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
OrtaCVSS 6,5İstismar yokEPSS %0guzzlephp · psr-78 Tem 2026
- CVE-2026-5988324İzleyin
Guzzle: Cookie Disclosure and Injection via IP-Address Domains
OrtaCVSS 6,1İstismar yokEPSS %0guzzlephp · guzzle8 Tem 2026
- CVE-2026-5576723İzleyin
Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
OrtaCVSS 5,8İstismar yokEPSS %0guzzlephp · guzzle23 Haz 2026
- CVE-2026-5556823İzleyin
Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
OrtaCVSS 5,9İstismar yokEPSS %0guzzlephp · guzzle23 Haz 2026
- CVE-2026-4899821İzleyin
guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
OrtaCVSS 5,3İstismar yokEPSS %0guzzlephp · psr-711 Haz 2026
- CVE-2026-4921421İzleyin
guzzlehttp/psr7 has CRLF Injection via URI Host Component
OrtaCVSS 5,3İstismar yokEPSS %0guzzlephp · psr-711 Haz 2026
- CVE-2026-5576619İzleyin
guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization
OrtaCVSS 4,8İstismar yokEPSS %0guzzlephp · psr-723 Haz 2026