{"action":"Upgrade guzzlehttp/guzzle to 7.15.1 or later.","affected":[{"fixed":"7.15.1","introduced":"0"}],"component":"guzzlehttp/guzzle","cve_ids":["CVE-2026-67353"],"ecosystem":"Packagist","epss":0.00418,"exploited":false,"fixed_versions":["7.15.1"],"ghsa_id":"GHSA-f283-ghqc-fg79","id":"tcs_01M5KF1B0ZXC9CMBSE3ESRJ981","modified_at":"2026-09-10T03:50:51.710471738Z","published_at":"2026-07-20T23:27:02Z","references":["https://osv.dev/vulnerability/GHSA-f283-ghqc-fg79","https://github.com/guzzle/guzzle/security/advisories/GHSA-f283-ghqc-fg79","https://nvd.nist.gov/vuln/detail/CVE-2026-67353","https://github.com/guzzle/guzzle/pull/3901","https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4","https://github.com/guzzle/guzzle","https://github.com/guzzle/guzzle/releases/tag/7.15.1","https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-unbounded-cookie-denial-of-service"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-f283-ghqc-fg79","url":"https://osv.dev/vulnerability/GHSA-f283-ghqc-fg79"}],"summary":"Guzzle: Unbounded response cookies risk denial of service"}