Composer guzzlehttp/psr7 has 6 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-24775 | Improper Input Validation in guzzlehttp/psr7 | medium | 5.3 | <1.8.4 or >=2.0.0 and <2.1.1 or >=2 and <2.1.1 | 1.8.4, 2.1.1 |
| CVE-2023-29197 | Improper header name validation in guzzlehttp/psr7 | medium | 5.3 | <1.9.1 or >=2.0.0 and <2.4.5 or >=2 and <2.4.5 | 1.9.1, 2.4.5 |
| CVE-2026-59882 | guzzlehttp/psr7: Host Confusion via Weak URI Host Validation | medium | 4.2 | <2.12.3 | 2.12.3 |
| CVE-2026-55766 | guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization | medium | 4.8 | <2.12.1 | 2.12.1 |
| CVE-2026-48998 | guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation | medium | 5.3 | <2.10.2 | 2.10.2 |
| CVE-2026-49214 | guzzlehttp/psr7 has CRLF Injection via URI Host Component | medium | 5.3 | <2.10.2 | 2.10.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked