CVE-2026-55767

A flaw was found in Guzzle, an extensible PHP HTTP client. The CookieJar component incorrectly accepted cookies with dot-only or whitespace-padded domain attributes. This vulnerability allows an attacker-controlled origin, when an application requests it with a shared cookie jar, to set a cookie...