https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:55:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-216406 EUVD-2026-216406 https://cve.radiocsirt.org/vuln/euvd-2026-216406 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29197 <p>guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.</p> <p>guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29197 https://cve.radiocsirt.org/vuln/ghsa-wxmh-65f7-jcvw <p><strong>Affected:</strong> Packagist: guzzlehttp/psr7</p> <p>### Impact</p> <p>Improper header parsing. An attacker could sneak in a newline (`\n`) into both the header names and values. While the specification states that `\r\n\r\n` is used to terminate the header list, many servers in the wild will also accept `\n\n`.</p> <p>### Patches</p> <p>The issue is patched in 1.9.1 and 2.4.5.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> <p>### References</p> <p>* https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4</p> <p><strong>Affected:</strong> Packagist: guzzlehttp/psr7</p> <p>### Impact</p> <p>Improper header parsing. An attacker could sneak in a newline (`\n`) into both the header names and values. While the specification states that `\r\n\r\n` is used to terminate the header list, many servers in the wild will also accept `\n\n`.</p> <p>### Patches</p> <p>The issue is patched in 1.9.1 and 2.4.5.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> <p>### References</p> <p>* https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4</p> https://cve.radiocsirt.org/vuln/ghsa-wxmh-65f7-jcvw https://cve.radiocsirt.org/vuln/gsd-2023-29197 gsd-2023-29197 https://cve.radiocsirt.org/vuln/gsd-2023-29197 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29197 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-nyholm-psr7, Ubuntu:Pro:22.04:LTS: php-guzzlehttp-psr7, Ubuntu:Pro:22.04:LTS: php-nyholm-psr7</p> <p>guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-guzzlehttp-psr7, Ubuntu:20.04:LTS: php-nyholm-psr7, Ubuntu:Pro:22.04:LTS: php-guzzlehttp-psr7, Ubuntu:Pro:22.04:LTS: php-nyholm-psr7</p> <p>guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29197 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1626 <p>Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen nicht näher spezifizierten Angriff und einen Cross-Site-Scripting Angriff duchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen nicht näher spezifizierten Angriff und einen Cross-Site-Scripting Angriff duchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1626