Skip to content
Threat Feed
Subscribe

Vendor

Guzzle

1 brief RSS
high threat

Guzzle Hostname Validation Bypass via Transport Discrepancy

Guzzle versions before 7.15.2 and 8.0.1 are vulnerable to a host-based security check bypass where transport handlers interpret non-canonical URI hostnames differently than application-level validation, potentially enabling SSRF.

exploited Guzzle +1 ssrf php vulnerability web-security
1t 1c