{"action":"Upgrade guzzlehttp/psr7 to 2.12.3 or later.","affected":[{"fixed":"2.12.3","introduced":"0"}],"component":"guzzlehttp/psr7","cve_ids":["CVE-2026-59882"],"ecosystem":"Packagist","epss":0.00317,"exploited":false,"fixed_versions":["2.12.3"],"ghsa_id":"GHSA-c2w2-prh8-qm98","id":"tcs_01M5KF0FHTH809D9SM0KRYXB03","modified_at":"2026-07-21T18:46:10.537345550Z","published_at":"2026-07-21T18:35:25Z","references":["https://osv.dev/vulnerability/GHSA-c2w2-prh8-qm98","https://github.com/guzzle/psr7/security/advisories/GHSA-c2w2-prh8-qm98","https://nvd.nist.gov/vuln/detail/CVE-2026-59882","https://github.com/guzzle/psr7/pull/811","https://github.com/guzzle/psr7/commit/ddd64f17d4cc1f7e5ffe6fd2c989ec7221712580","https://github.com/guzzle/psr7","https://github.com/guzzle/psr7/releases/tag/2.12.3"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-c2w2-prh8-qm98","url":"https://osv.dev/vulnerability/GHSA-c2w2-prh8-qm98"}],"summary":"guzzlehttp/psr7: Host Confusion via Weak URI Host Validation"}