guzzlehttp/psr7 Security Advisories for 2.10.4 (2)
-
[MEDIUM] guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
PKSA-vznr-tgp9-fd7d CVE-2026-59882 GHSA-c2w2-prh8-qm98
Affected version: <2.12.3
Reported by:
GitHub -
[MEDIUM] CRLF injection in HTTP start-line serialization
PKSA-7qs6-zvnz-h66r CVE-2026-55766 GHSA-vm85-hxw5-5432
Affected version: <2.12.1
Reported by:
GitHub, FriendsOfPHP/security-advisories