[MEDIUM] guzzlehttp/psr7 has CRLF Injection via URI Host Component

PKSA-gm5x-j3mz-71n9 CVE-2026-49214 GHSA-hq7v-mx3g-29hw

Affected package: guzzlehttp/psr7

Affected version: <2.10.2

Reported by:
GitHub