Known vulnerabilities in PSR-7
Vendor:
Guzzle
Software:
PSR-7
Software CPE:
cpe:2.3:a:guzzle:psr7:*:*:*:*:*:*:*:*
Website:
https://github.com/guzzle/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
3.0.0
2.13.0
2.12.5
2.12.4
2.12.3
2.12.2
2.12.1
2.12.0
2.11.1
2.11.0
2.10.4
2.10.3
2.10.2
2.10.1
2.10.0
2.9.1
2.9.0
2.8.1
2.8.0
2.7.1
2.7.0
2.6.3
2.6.2
2.6.1
2.6.0
2.5.1
2.5.0
2.4.5
1.9.1
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
1.9.0
2.3.0
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
2.1.0
2.0.0
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.0
1.6.1
1.6.0
1.5.2
1.5.1
1.5.0
1.4.2
1.4.1
1.4.0
1.3.1
1.3.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.0
1.0.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134879 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-55766 |
CWE-93 | Medium | 2.12.1 | 18.06.2026 |
SB2026061852 |
||
| #VU132301 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-49214 |
CWE-93 | Medium | 2.10.2 | 26.05.2026 |
SB2026052627 |
||
| #VU132300 - Server-Side Request Forgery (SSRF) CVE-2026-48998 |
CWE-918 | Medium | 2.10.2 | 26.05.2026 |
SB2026052627 |
||
| #VU75203 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-29197 |
CWE-444 | Medium | 1.9.1, 2.4.5 | 18.04.2023 |
SB2023041824 SB2023070330 SB2023082035 and 4 more |
||
| #VU61508 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-24775 |
CWE-113 | Medium | 1.8.4, 2.1.1 | 21.03.2022 |
SB2022032132 SB2022032133 SB2024022943 |