{"action":"Upgrade guzzlehttp/guzzle to 7.15.1 or later.","affected":[{"fixed":"7.15.1","introduced":"0"}],"component":"guzzlehttp/guzzle","cve_ids":["CVE-2026-67355"],"ecosystem":"Packagist","epss":0.00366,"exploited":false,"fixed_versions":["7.15.1"],"ghsa_id":"GHSA-wm3w-8rrp-j577","id":"tcs_01M5KFA64SQFRHXDMEN6M9S3E8","modified_at":"2026-09-10T03:51:12.418606242Z","published_at":"2026-07-20T23:27:49Z","references":["https://osv.dev/vulnerability/GHSA-wm3w-8rrp-j577","https://github.com/guzzle/guzzle/security/advisories/GHSA-wm3w-8rrp-j577","https://nvd.nist.gov/vuln/detail/CVE-2026-67355","https://github.com/guzzle/guzzle/pull/3901","https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4","https://github.com/guzzle/guzzle","https://github.com/guzzle/guzzle/releases/tag/7.15.1","https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-host-only-cookie-scope"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-wm3w-8rrp-j577","url":"https://osv.dev/vulnerability/GHSA-wm3w-8rrp-j577"}],"summary":"Guzzle: Host-only cookie scope is not preserved"}