Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filtersGuzzle: Noncanonical host can bypass host-based checks
Guzzle: Noncanonical cookie domain keeps subdomain scope
guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
Guzzle: URI fragments disclosed in redirect Referer headers
Guzzle: Host-only cookie scope is not preserved
Guzzle: Unbounded response cookies risk denial of service
Guzzle: Cookie Disclosure and Injection via IP-Address Domains
Guzzle: Proxy-Authorization headers can be sent to origin servers
guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts
guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization
guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
guzzlehttp/psr7 has CRLF Injection via URI Host Component
Change in port should be considered a change in origin
Guzzle <= 6.5.7 and 7.0-7.4.4 - Information Exposure
Drupal core - SA-CORE-2022-011
Drupal core - SA-CORE-2022-010
HTTP Proxy header vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.