https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:58:12.305289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-59882 CVE-2026-59882 — guzzlehttp/psr7: Host Confusion via Weak URI Host Validation 2026-10-07T11:58:12.321749+00:00

Affected: guzzle psr7

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost() to disagree with the URI authority used for security or routing decisions. This issue is fixed in version 2.12.3.