CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms

CVE-2021-21424

Affected version: >=2.8.0,<3.0.0|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.4.0|>=3.4.0,<3.4.49|>=4.0.0,<4.1.0|>=4.1.0,<4.2.0|>=4.2.0,<4.3.0|>=4.3.0,<4.4.0|>=4.4.0,<4.4.24|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.2.9

Reported by:
FriendsOfPHP/security-advisories

CVE-2020-15094: Prevent RCE when calling untrusted remote with CachingHttpClient

CVE-2020-15094

Affected version: >=4.3.0,<4.4.0|>=4.4.0,<4.4.13|>=5.0.0,<5.1.0|>=5.1.0,<5.1.5

Reported by:
FriendsOfPHP/security-advisories