G
Vendor security profile
guzzle
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
10toplam CVE
Uncertain10 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
7.2
CVE-2026-69246Guzzle: Noncanonical host can bypass host-based checks
Patch verifiedEPSS %0
6.5
CVE-2026-69245Guzzle: Noncanonical cookie domain keeps subdomain scope
Patch verifiedEPSS %0
8.2
CVE-2026-67354guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer
Patch verifiedEPSS %0
8.2
CVE-2026-67355guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope
Patch verifiedEPSS %0
6.9
CVE-2026-67353guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service
Patch verifiedEPSS %0
6.9
CVE-2026-67339guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
Patch verifiedEPSS %0
6.1
6.5
5.8
CVE-2026-55767Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
Patch verifiedEPSS %0
4.8
CVE-2026-55766Vulnerability in Guzzlephp Psr 7
Patch status unknownEPSS %0