Skip to content
Threat Feed
Subscribe

Product

Guzzle (8.0.0)

1 brief RSS
high threat

Guzzle Hostname Validation Bypass via Transport Discrepancy

Guzzle versions before 7.15.2 and 8.0.1 are vulnerable to a host-based security check bypass where transport handlers interpret non-canonical URI hostnames differently than application-level validation, potentially enabling SSRF.

exploited Guzzle +1 ssrf php vulnerability web-security
1t 1c