Packagist/drupal/core CVE-2022-29248: unknown, EPSS 1.36%

Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. [Guzzle has released a security update](https://github.com/guzzle/guzzle/security/advisories/G

Action: Upgrade drupal/core to 9.2.20 or later.

composer require drupal/core:9.2.20

composer require drupal/core:9.3.14

Affected

introduced	fixed	last affected
8.0.0	9.2.20	-
9.3.0	9.3.14	-

Fixed versions

9.2.20

9.3.14

Sources

osv: DRUPAL-CORE-2022-010
https://www.drupal.org/sa-core-2022-010

CVE-2022-29248 · published 2022-05-25T19:39:01Z · modified 2026-09-19T16:27:58Z · JSON