G
Vendor security profile
guzzle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
1
1
6
0
0
CVE KEV
CVE severity distribution
8toplam CVE
High3 (38%)
Medium5 (63%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
7.2
CVE-2026-69246
Guzzle: Noncanonical host can bypass host-based checks
G
Patch verifiedEPSS %0
6.5
CVE-2026-69245
Guzzle: Noncanonical cookie domain keeps subdomain scope
G
Patch verifiedEPSS %0
8.2
CVE-2026-67354
guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer
G
Patch verifiedEPSS %0
8.2
CVE-2026-67355
guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope
G
Patch verifiedEPSS %0
6.9
CVE-2026-67353
guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service
G
Patch verifiedEPSS %0
6.9
CVE-2026-67339
guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
G
Patch verifiedEPSS %0
6.1
CVE-2026-59883
Vulnerability in Guzzlephp
G
Patch verifiedEPSS %0
6.5
CVE-2026-59882
Vulnerability in Guzzlephp Psr 7
G
Patch verifiedEPSS %0
5.8
CVE-2026-55767
Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
G
Patch verifiedEPSS %0
4.8
CVE-2026-55766
Vulnerability in Guzzlephp Psr 7
G
Patch status unknownEPSS %0