psr-7 vulnerabilities

CVEs whose affected-version data names the psr-7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59882Medium· 4.2

2mo ago

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri:…

▾ Sunlitguzzlephp · psr-7EPSS 0.32%via NVD