{"action":"Upgrade amphp/artax to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"},{"fixed":"2.0.4","introduced":"2.0.0"}],"component":"amphp/artax","cve_ids":["CVE-2016-5385"],"ecosystem":"Packagist","epss":0.50427,"exploited":false,"fixed_versions":["1.0.4","2.0.4"],"ghsa_id":"GHSA-m6ch-gg5f-wxx3","id":"tcs_01M5KF57Y4MXFEPK004TX8V6S5","modified_at":"2023-11-08T03:58:31.024570Z","published_at":"2022-04-07T13:59:22Z","references":["https://osv.dev/vulnerability/GHSA-m6ch-gg5f-wxx3","https://nvd.nist.gov/vuln/detail/CVE-2016-5385","https://github.com/bugsnag/bugsnag-laravel/pull/143","https://github.com/bugsnag/bugsnag-laravel/pull/145","https://github.com/humbug/file_get_contents/pull/23","https://github.com/humbug/file_get_contents/pull/23/commits/848e8c282a863654e76bd958acfb57c81cb739b5","https://github.com/amphp/artax/commit/81254742812a5a9adf4b085f543f3f21daedcd97","https://github.com/amphp/artax/commit/b60cf493c9e577a3678865f620b1eb61ab3d7ca9","https://bugzilla.redhat.com/show_bug.cgi?id=1353794","https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2016-5385.yaml","https://github.com/bugsnag/bugsnag-laravel/releases/tag/v2.0.2","https://github.com/guzzle/guzzle/blob/4.x/CHANGELOG.md#424-2016-07-18","https://github.com/guzzle/guzzle/blob/5.3/CHANGELOG.md#531---2016-07-18","https://github.com/guzzle/guzzle/blob/master/CHANGELOG.md#622---2016-10-08","https://github.com/guzzle/guzzle/releases/tag/6.2.1","https://github.com/humbug/file_get_contents/releases/tag/1.1.2","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/","https://security.gentoo.org/glsa/201611-22","https://www.drupal.org/SA-CORE-2016-003","http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html","http://rhn.redhat.com/errata/RHSA-2016-1609.html","http://rhn.redhat.com/errata/RHSA-2016-1610.html","http://rhn.redhat.com/errata/RHSA-2016-1611.html","http://rhn.redhat.com/errata/RHSA-2016-1612.html","http://rhn.redhat.com/errata/RHSA-2016-1613.html","http://www.debian.org/security/2016/dsa-3631","http://www.kb.cert.org/vuls/id/797896","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","http://www.securityfocus.com/bid/91821","http://www.securitytracker.com/id/1036335"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-m6ch-gg5f-wxx3#Packagist/amphp/artax","url":"https://osv.dev/vulnerability/GHSA-m6ch-gg5f-wxx3"}],"summary":"HTTP Proxy header vulnerability"}