https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:06:59.633944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-216406 EUVD-2026-216406 2026-10-04T04:06:59.640439+00:00 EUVD-2026-216406 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29197 fkie_cve-2023-29197 2026-10-04T04:06:59.640493+00:00

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/ghsa-wxmh-65f7-jcvw GHSA-wxmh-65f7-jcvw — Improper header name validation in guzzlehttp/psr7 2026-10-04T04:06:59.640563+00:00

Affected: Packagist: guzzlehttp/psr7

### Impact

Improper header parsing. An attacker could sneak in a newline (`\n`) into both the header names and values. While the specification states that `\r\n\r\n` is used to terminate the header list, many servers in the wild will also accept `\n\n`.

### Patches

The issue is patched in 1.9.1 and 2.4.5.

### Workarounds

There are no known workarounds.

### References

* https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4

 https://cve.radiocsirt.org/vuln/gsd-2023-29197 gsd-2023-29197 2026-10-04T04:06:59.640621+00:00 gsd-2023-29197 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29197 UBUNTU-CVE-2023-29197 2026-10-04T04:06:59.640650+00:00

Affected: Ubuntu:16.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-nyholm-psr7, Ubuntu:Pro:22.04:LTS: php-guzzlehttp-psr7, Ubuntu:Pro:22.04:LTS: php-nyholm-psr7

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1626 WID-SEC-W-2023-1626 — MediaWiki: Mehrere Schwachstellen 2026-10-04T04:06:59.640714+00:00

Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen nicht näher spezifizierten Angriff und einen Cross-Site-Scripting Angriff duchzuführen.