Change in port should be considered a change in origin

CVE-2022-31091

Affected version: >=7,<7.4.5|>=4,<6.5.8

Reported by:
GitHub, FriendsOfPHP/security-advisories

CURLOPT_HTTPAUTH option not cleared on change of origin

CVE-2022-31090

Affected version: >=7,<7.4.5|>=4,<6.5.8

Reported by:
GitHub, FriendsOfPHP/security-advisories

Fix failure to strip Authorization header on HTTP downgrade

CVE-2022-31043

Affected version: >=7,<7.4.4|>=4,<6.5.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

Failure to strip the Cookie header on change in host or HTTP downgrade

CVE-2022-31042

Affected version: >=7,<7.4.4|>=4,<6.5.7

Reported by:
GitHub, FriendsOfPHP/security-advisories

Cross-domain cookie leakage

CVE-2022-29248

Affected version: >=7,<7.4.3|>=4,<6.5.6

Reported by:
GitHub, FriendsOfPHP/security-advisories