Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

guzzlehttp/psr7

6 known vulnerabilities (1 high, 5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 high, 5 medium
Registry
Packagist

Advisories 6

  • CVE-2026-59882Medium 4.2

    guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

    Affected: fixed in 2.12.3.

  • CVE-2026-55766Medium 4.8

    guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization

    Affected: fixed in 2.12.1.

  • CVE-2026-49214Medium 5.3

    guzzlehttp/psr7 has CRLF Injection via URI Host Component

    Affected: fixed in 2.10.2.

  • CVE-2026-48998Medium 5.3

    guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation

    Affected: fixed in 2.10.2.

  • CVE-2023-29197Medium 5.3

    Improper header name validation in guzzlehttp/psr7

    Affected: fixed in 1.9.1; from 2.0.0, fixed in 2.4.5.

  • Improper Input Validation in guzzlehttp/psr7

    Affected: fixed in 1.8.4; from 2.0.0, fixed in 2.1.1.