GHSA-F283-GHQC-FG79 Guzzle: Unbounded response cookies risk denial of service

Impact In affected versions, Guzzle's built-in CookieJar accepts any number of Set-Cookie header fields from one response, with no limit on the size of each field. When a later request matches the stored cookies, Guzzle places every match into one generated Cookie header without limiting the numb...

PT-2026-67326

Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.15.1 Description A denial of service issue exists in the CookieJar component. The system accepts an unlimited number of Set-Cookie header fields without size restrictions. A malicious server can return...