Skip to content
OpenAdvisories

Package · Packagist

amphp/artax

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-gm98-g2wf-7c68

    amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance

    In artax version before 1.0.6 and 2 before 2.0.6, cookies of `foo.bar.example.com` were leaked to `foo.bar`. Additionally, any site could set cookies for any other site. Artax fixed this issue by following newer browser implementations now. Cookies can only b…

    amphp/artax Packagist
  • High 8.1
    CVE-2016-5385 EPSS 50%

    HTTP Proxy header vulnerability

    PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redi…

    php5 php7.0 drupal/core guzzlehttp/guzzle Ubuntu Packagist