{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"guzzle","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NT0B5M8ATH248EQ604X3CJ","modified_at":"2026-10-01T03:03:26.753976852Z","published_at":"2026-06-23T16:17:02.990Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-55568","https://security-tracker.debian.org/tracker/CVE-2026-55568"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-55568","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-55568"}],"summary":"Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, in certain configurations, traffic expected to be protected by TLS on the hop to the proxy is transmitted in cleartext. Proxy authentication c"}