← Database

CVE-2022-24775

HIGH CVSS: 7.5 Published: 2022-03-21 Modified: 2026-06-17

Description

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.

Affected Platforms

Drupal DrupalGuzzlephp Psr-7

Weakness Type

CWE-20

References