Login Request a demo
GU
Vendor
guzzle
4 products with CVEs on record
15
CVEs
0
On KEV
0
New 30D
Products
GU
guzzle
guzzle
7.2
9 CVEs0 on KEV0 new
PS
psr7
guzzle
6.5
4 CVEs0 on KEV0 new
GU
guzzle-services
guzzle
5.8
1 CVEs0 on KEV0 new
OA
oauth-subscriber
guzzle
6.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-69246
GU
guzzle
guzzle
7.2
0%
Aug 3Guzzle: Noncanonical host can bypass host-based checks
CVE-2026-69245
GU
guzzle
guzzle
6.5
0%
Aug 3Guzzle: Noncanonical cookie domain keeps subdomain scope
CVE-2026-67354
GU
guzzle
guzzle
5.9
0%
Aug 1guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer
CVE-2026-67355
GU
guzzle
guzzle
5.9
0%
Aug 1guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope
CVE-2026-67353
GU
guzzle
guzzle
5.3
0%
Aug 1guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service
CVE-2026-67339
GU
guzzle
guzzle
5.3
0%
Aug 1guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
CVE-2026-59883
GU
guzzle
guzzle
6.1
0%
Jul 8Guzzle: Cookie Disclosure and Injection via IP-Address Domains
CVE-2026-59882
PS
psr7
guzzle
6.5
0%
Jul 8guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
CVE-2026-55766
PS
psr7
guzzle
4.8
0%
Jun 23guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization
CVE-2026-55767
GU
guzzle
guzzle
5.8
0%
Jun 23Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
CVE-2026-55568
GU
guzzle
guzzle
5.9
0%
Jun 23Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
CVE-2026-53723
GU
guzzle-services
guzzle
5.8
0%
Jun 11guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
CVE-2026-49214
PS
psr7
guzzle
5.3
0%
Jun 11guzzlehttp/psr7 has CRLF Injection via URI Host Component
CVE-2026-48998
PS
psr7
guzzle
5.3
0%
Jun 11guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
CVE-2025-21617
OA
oauth-subscriber
guzzle
6.3
0%
Jan 6Guzzle OAuth Subscriber has insufficient nonce entropy