Change in port should be considered a change in origin

CVE-2022-31091

Affected version: >=7,<7.4.5|>=4,<6.5.8

Reported by:
GitHub, FriendsOfPHP/security-advisories

CURLOPT_HTTPAUTH option not cleared on change of origin

CVE-2022-31090

Affected version: >=7,<7.4.5|>=4,<6.5.8

Reported by:
GitHub, FriendsOfPHP/security-advisories

Fix failure to strip Authorization header on HTTP downgrade

CVE-2022-31043

Affected version: >=7,<7.4.4|>=4,<6.5.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

Failure to strip the Cookie header on change in host or HTTP downgrade

CVE-2022-31042

Affected version: >=7,<7.4.4|>=4,<6.5.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

Cross-domain cookie leakage

CVE-2022-29248

Affected version: >=7,<7.4.3|>=4,<6.5.6

Reported by:
GitHub, FriendsOfPHP/security-advisories

HTTP Proxy header vulnerability

CVE-2016-5385

Affected version: >=6,<6.2.1|>=4.0.0-rc2,<4.2.4|>=5,<5.3.1

Reported by:
GitHub, FriendsOfPHP/security-advisories