CVE-2022-24775

Published: 2022-03-21T19:15Z

Last Modified: 2024-11-21T06:51Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt