tocsin

Debian/guzzle: high 8.1

Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the d

Action: Upgrade guzzle to 7.4.4-1 or later.

Affected

introducedfixedlast affected
07.4.4-1-

Fixed versions

7.4.4-1

Sources

published · modified · JSON