https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T14:05:22.408531+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-29197 CVE-2023-29197 — Improper header name validation in guzzlehttp/psr7 2026-10-02T14:05:22.826245+00:00

Affected: guzzle psr7

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.

 https://vulnerability.circl.lu/vuln/usn-6670-1 USN-6670-1 — php-guzzlehttp-psr7 vulnerabilities 2026-10-02T14:05:22.826353+00:00

Affected: Ubuntu:20.04:LTS: php-guzzlehttp-psr7, Ubuntu:Pro:22.04:LTS: php-guzzlehttp-psr7

It was discovered that php-guzzlehttp-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use these issues to perform an HTTP header injection attack.