Skip to content
OpenAdvisories

Package · Packagist

guzzlehttp/guzzle-services

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.8

    guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator

    Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle service descriptions to describe web services, serialize requests, and parse responses into easy to use model structures. Versions prior ro 1.5.4 do not safely serialize…