Skip to content
OpenAdvisories
Medium DLA-3705-1 1 CVE

php-guzzlehttp-psr7 - security update

Published Dec 31, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 php-guzzlehttp-psr7 1.4.2-0.1+deb10u2

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-29197

    Improper header name validation in guzzlehttp/psr7

    guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is u…

    guzzle psr7 php-guzzlehttp-psr7 guzzlehttp/psr7 Debian Ubuntu Packagist