CVE-2026-69245

Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, SetCookie::matchesDomain gives every subdomain of a cookie Domain that cookie unless SetCookie::matchesDomain recognizes the Domain as an IP literal or a numeric host, and the decision comes from the domain's own text, so two...

PT-2021-24405

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.7 and earlier Description: The issue is related to the handling of HTML character entities in hexadecimal form. Specifically, the software only unescapes lowercase hexadecimal characters, while browsers support both...