https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:36:50.753219+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01894 bdu:2024-01894 2026-10-03T09:36:50.861974+00:00 bdu:2024-01894 https://cve.radiocsirt.org/vuln/bit-drupal-2022-24775 BIT-drupal-2022-24775 — Improper Input Validation in guzzlehttp/psr7 2026-10-03T09:36:50.862009+00:00

Affected: Bitnami: drupal

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-262 certfr-2022-avi-262 — Une vulnérabilité a été découverte dans Drupal Core. Elle permet à un attaquant de provoquer un contournement de la pol… 2026-10-03T09:36:50.862040+00:00 certfr-2022-avi-262 https://cve.radiocsirt.org/vuln/euvd-2026-234300 EUVD-2026-234300 2026-10-03T09:36:50.862057+00:00 EUVD-2026-234300 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24775 fkie_cve-2022-24775 2026-10-03T09:36:50.862069+00:00

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-q7rv-6hp3-vh96 GHSA-q7rv-6hp3-vh96 — Improper Input Validation in guzzlehttp/psr7 2026-10-03T09:36:50.862090+00:00

Affected: Packagist: guzzlehttp/psr7

### Impact

Improper header parsing. An attacker could sneak in a carriage return character (`\r`) and pass untrusted values in both the header names and values.

### Patches

The issue is patched in 1.8.4 and 2.1.1.

### Workarounds

There are no known workarounds.

### References

* https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4

 https://cve.radiocsirt.org/vuln/gsd-2022-24775 gsd-2022-24775 2026-10-03T09:36:50.862116+00:00 gsd-2022-24775 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24775 UBUNTU-CVE-2022-24775 2026-10-03T09:36:50.862128+00:00

Affected: Ubuntu:16.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-guzzlehttp-psr7, Ubuntu:Pro:22.04:LTS: php-guzzlehttp-psr7

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.