71 matches found
CLEANSTART-2026-WE26169 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP
Security vulnerability affects the nextcloud package. guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP...
CLEANSTART-2026-LY70913 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP
Security vulnerability affects the nextcloud package. guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP...
CLEANSTART-2026-GA85489 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP
Security vulnerability affects the nextcloud package. guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP...
CVE-2026-55573
e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...
EUVD-2026-101532
e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...
CVE-2026-55573
The e107 content management system (CMS) versions prior to 2.3.7 is vulnerable to unauthenticated remote code execution (RCE) due to unsafe deserialization. The install.php file processes the attacker-controlled previous_steps POST parameter using unserialize() without restricting allowed classes...
CVE-2026-55573: Deserialization of Untrusted Data
e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...
CLSA-2026-1788333194 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.1.0-p2+tuxcare...
PT-2026-90624
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.1.0-p2+tuxcare...
CLSA-2026-1786527009 TuxCare security update for guzzlehttp/psr7 (5 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...
PT-2026-80103
TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...
CLSA-2026-1786346242 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.9.1-p2+tuxcare...
PT-2026-80011
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.9.1-p2+tuxcare...
CLSA-2026-1785554486 TuxCare security update for guzzlehttp/psr7 (2 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 2 CVEs. Fixed in 1.4.2-p2+tuxcare...
CLSA-2026-1783991045 TuxCare security update for guzzlehttp/psr7 (3 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 3 CVEs. Fixed in 1.4.2-p1+tuxcare...
CLSA-2026-1783991043 TuxCare security update for guzzlehttp/psr7 (3 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 3 CVEs. Fixed in 1.9.1-p1+tuxcare...
PT-2026-75852
TuxCare rebuilt guzzlehttp/psr7 to address 2 CVEs. Fixed in 1.4.2-p2+tuxcare...
PT-2026-75392
TuxCare rebuilt guzzlehttp/psr7 to address 3 CVEs. Fixed in 1.9.1-p1+tuxcare...
PT-2026-75394
TuxCare rebuilt guzzlehttp/psr7 to address 3 CVEs. Fixed in 1.4.2-p1+tuxcare...
Improper Input Validation
guzzlehttp/psr7 is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of URI host components in Uri::assertValidHost, which fails to reject authority delimiters, embedded ports, and malformed IPv6 brackets, allowing an attacker to craft malicious URIs tha...