PT-2026-56500

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.12.3 Description The Uri::assertValidHost function fails to reject URI host components that contain authority delimiters, embedded ports, or malformed IPv6 brackets. This discrepancy allows Uri::getHost to...

CVE-2026-48998

GuzzleHttp/psr7 (PHP) before version 2.10.2 is affected by improper Host header validation when parsing raw HTTP requests or deriving a server request URI from server variables. An attacker can supply a Host header containing URI delimiters (for example [email protected]) that can be r...

Linux Distros Unpatched Vulnerability : CVE-2022-24775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new...

The vulnerability of the PSR-7 guzzlehttp/psr7 HTTP message processing library, due to insufficient validation of input data, allows attackers to compromise the integrity of the protected information.

The vulnerability of the PSR-7 guzzlehttp/psr7 HTTP message processing library is related to insufficient validation of input data during header processing. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...