{"action":"Upgrade guzzlehttp/guzzle to 6.5.6 or later.","affected":[{"fixed":"6.5.6","introduced":"0"},{"fixed":"7.4.3","introduced":"7.0.0"}],"component":"guzzlehttp/guzzle","cve_ids":["CVE-2022-29248"],"ecosystem":"Packagist","epss":0.01362,"exploited":false,"fixed_versions":["6.5.6","7.4.3"],"ghsa_id":"GHSA-cwmx-hcrq-mhc3","id":"tcs_01M5KF19A01WEGAHK54JVA0RV8","modified_at":"2025-12-10T23:41:02.272273Z","published_at":"2022-05-25T18:09:55Z","references":["https://osv.dev/vulnerability/GHSA-cwmx-hcrq-mhc3","https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3","https://nvd.nist.gov/vuln/detail/CVE-2022-29248","https://github.com/guzzle/guzzle/pull/3018","https://github.com/guzzle/guzzle/commit/74a8602c6faec9ef74b7a9391ac82c5e65b1cdab","https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-29248.yaml","https://github.com/guzzle/guzzle","https://www.debian.org/security/2022/dsa-5246","https://www.drupal.org/sa-core-2022-010"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-cwmx-hcrq-mhc3","url":"https://osv.dev/vulnerability/GHSA-cwmx-hcrq-mhc3"}],"summary":"Cross-domain cookie leakage in Guzzle"}