What’s Vulnerable › Products

Guzzlephp Psr-7 vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Guzzlephp Psr-7 version is affected

Latest Guzzlephp Psr-7 vulnerabilities

• CVE-2026-59882 — guzzlehttp/psr7: Host Confusion via Weak URI Host Validation (CVSS 6.5)
• CVE-2026-55766 — guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization (CVSS 4.8)
• CVE-2026-49214 — guzzlehttp/psr7 has CRLF Injection via URI Host Component (CVSS 5.3)
• CVE-2026-48998 — guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation (CVSS 5.3)
• CVE-2023-29530 — Laminas Diactoros vulnerable to HTTP Multiline Header Termination (CVSS 6.5)
• CVE-2023-29197 — Improper header name validation in guzzlehttp/psr7 (CVSS 7.5)
• CVE-2022-24775 — Improper Input Validation in guzzlehttp/psr7 (CVSS 7.5)