201 matches found
GHSA-F283-GHQC-FG79 Guzzle: Unbounded response cookies risk denial of service
Impact In affected versions, Guzzle's built-in CookieJar accepts any number of Set-Cookie header fields from one response, with no limit on the size of each field. When a later request matches the stored cookies, Guzzle places every match into one generated Cookie header without limiting the numb...