GU
Product
guzzle
9
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add guzzle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69246 | 7.2 | Aug 3 | Guzzle: Noncanonical host can bypass host-based checks Affected: >= 8.0.0, < 8.0.1; < 7.15.2 |
| CVE-2026-69245 | 6.5 | Aug 3 | Guzzle: Noncanonical cookie domain keeps subdomain scope Affected: < 7.15.2; >= 8.0.0, < 8.0.1 |
| CVE-2026-59883 | 6.1 | Jul 8 | Guzzle: Cookie Disclosure and Injection via IP-Address Domains Affected: < 7.12.3 |
| CVE-2026-67354 | 5.9 | Aug 1 | guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer Affected: before 7.15.1 |
| CVE-2026-67355 | 5.9 | Aug 1 | guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope Affected: before 7.15.1 |
| CVE-2026-55568 | 5.9 | Jun 23 | Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext Affected: < 7.12.1 |
| CVE-2026-55767 | 5.8 | Jun 23 | Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle Affected: < 7.12.1 |
| CVE-2026-67353 | 5.3 | Aug 1 | guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service Affected: before 7.15.1 |
| CVE-2026-67339 | 5.3 | Aug 1 | guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure Affected: before 7.14.2 |
Showing 9