Skip to content
OpenAdvisories

Package · Debian

php-nyholm-psr7

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-29197

    Improper header name validation in guzzlehttp/psr7

    guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is u…

    guzzle psr7 php-guzzlehttp-psr7 guzzlehttp/psr7 Debian Ubuntu Packagist