{"metadata": {"vulnerability": "CVE-2026-59883", "count": 18, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-07T16:40:07.982Z", "date_only": false, "value": "2026-07-07T16:40:07.982Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-59883", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-08T15:56:03.689Z", "date_only": false, "value": "2026-07-08T15:56:03.689Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-59883", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-08T15:56:03.689Z", "date_only": false, "value": "2026-07-08T15:56:03.689Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-59883", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-08T17:17:00Z", "date_only": false, "value": "2026-07-08T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-59883", "record": "UBUNTU-CVE-2026-59883", "field": "published"}, {"timestamp": "2026-07-08T17:17:26Z", "date_only": false, "value": "2026-07-08T17:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G446-98W2-8P5W", "record": "GHSA-G446-98W2-8P5W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-08T17:17:26.737Z", "date_only": false, "value": "2026-07-08T17:17:26.737", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59883", "record": "FKIE_CVE-2026-59883", "field": "published"}, {"timestamp": "2026-07-08T19:23:30.450Z", "date_only": false, "value": "2026-07-08T19:23:30.450274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tsoicmx2x", "record": "CVE-2026-59883", "field": "creation_timestamp", "uuid": "3cd3c4ac-8ab0-45ec-860e-158d9b3064ca", "content": "CVE-2026-59883 - Guzzle: Cookie Disclosure and Injection via IP-Address Domains\nCVE ID : CVE-2026-59883\n \n Published : July 8, 2026, 5:17 p.m. | 31\u00a0minutes ago\n \n Description : Guzzle is an extensible PHP HTTP client. Prior to 7.12.3, CookieJar did not restrict cookies scoped ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tsoicmx2x"}, {"timestamp": "2026-07-09T13:49:33.967Z", "date_only": false, "value": "2026-07-09T13:49:33.967121Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-59883", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-09T13:49:33.967Z", "date_only": false, "value": "2026-07-09T13:49:33.967121Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59883", "record": "FKIE_CVE-2026-59883", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-09T13:49:43.875Z", "date_only": false, "value": "2026-07-09T13:49:43.875Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-59883", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T13:49:43.875Z", "date_only": false, "value": "2026-07-09T13:49:43.875Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-59883", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-13T14:01:39.700Z", "date_only": false, "value": "2026-07-13T14:01:39.700", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-59883", "record": "FKIE_CVE-2026-59883", "field": "lastModified"}, {"timestamp": "2026-07-13T17:48:40.645Z", "date_only": false, "value": "2026-07-13T17:48:40.645460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkatpltbc2e", "record": "CVE-2026-59883", "field": "creation_timestamp", "uuid": "1d2db7cc-9b31-41b6-a706-3d5ffacff9d6", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59883 \u0432 Guzzle: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C2D085F2-02D0-47B6-8EA3-BA37DFB89D58", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkatpltbc2e"}, {"timestamp": "2026-07-16T08:03:53.113Z", "date_only": false, "value": "2026-07-16T08:03:53.113722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrkrlvox2z", "record": "CVE-2026-59883", "field": "creation_timestamp", "uuid": "89218e36-97ad-48a1-a296-46f83421dfdd", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d2\u05d5\u05d6\u05dc - CVE-2026-59883 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/AFDF0DC6-73F8-4E0A-ACA4-38FB728F4E79", "url": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrkrlvox2z"}, {"timestamp": "2026-07-20T22:00:09Z", "date_only": false, "value": "2026-07-20T22:00:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G446-98W2-8P5W", "record": "GHSA-G446-98W2-8P5W", "field": "published"}, {"timestamp": "2026-07-20T22:00:09Z", "date_only": false, "value": "2026-07-20T22:00:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G446-98W2-8P5W", "record": "GHSA-G446-98W2-8P5W", "field": "modified"}, {"timestamp": "2026-07-20T22:31:01.538Z", "date_only": false, "value": "2026-07-20T22:31:01.538383Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771", "record": "CVE-2026-59883", "field": "creation_timestamp", "uuid": "90e28d30-59d9-441d-b444-ee9d84772479", "content": "# CVE-2026-59883: CVE-2026-59883: Cookie Disclosure and Injection via IP-Address Domains in Guzzle HTTP Client\n\n> **CVSS Score:** 4.7\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59883\n\n## Summary\nGuzzle HTTP Client prior to version 7.12.3 contains a logical flaw in its CookieJar component. The client fails to properly validate the host types of stored cookie domain attributes before applying standard suffix-matching logic. As a consequence, sensitive session cookies scoped to an IP address (e.g., 192.168.0.1) can be leaked to malicious, look-alike hostnames (e.g., evil.192.168.0.1). This vulnerability permits cross-host cookie disclosure, cookie injection, and session fixation attacks.\n\n## TL;DR\nGuzzle HTTP Client before version 7.12.3 incorrectly applies suffix matching to cookie domains scoped to literal IP addresses, allowing sensitive cookies to be leaked to unauthorized look-alike subdomains.\n\n## Technical Details\n\n- **CWE ID**: CWE-346 (Origin Validation Error)\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.7\n- **EPSS Score**: 0.00115\n- **Impact**: Cross-Host Cookie Disclosure / Injection\n- **Exploit Status**: none\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Guzzle HTTP Client (PHP Package: guzzlehttp/guzzle)\n- **guzzlehttp/guzzle**: < 7.12.3 (Fixed in: `7.12.3`)\n\n## Mitigation\n\n- Upgrade Guzzle HTTP Client to version 7.12.3 or later\n- Disable CookieJar middleware when making requests targeting raw IP addresses\n- Implement a custom PSR-7 middleware to strip the domain attribute from Set-Cookie headers targeting raw IP addresses\n\n**Remediation Steps:**\n1. Open a terminal in your project root containing the Composer configuration.\n2. Execute the command: composer update guzzlehttp/guzzle\n3. Verify the upgrade by executing: composer show guzzlehttp/guzzle\n4. Confirm the installed version is 7.12.3 or higher.\n\n## References\n\n- [GHSA-g446-98w2-8p5w: Cookie disclosure and injection via IP-address domains](https://github.com/guzzle/guzzle/security/advisories/GHSA-g446-98w2-8p5w)\n- [Guzzle Fix Commit](https://github.com/guzzle/guzzle/commit/b9944c161b12d9ee9c9334cfc5b9659ecd7451f8)\n- [Guzzle Pull Request 3694](https://github.com/guzzle/guzzle/pull/3694)\n- [Guzzle v7.12.3 Release Notes](https://github.com/guzzle/guzzle/releases/tag/7.12.3)\n- [NVD - CVE-2026-59883 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-59883)\n- [CVE.org - CVE-2026-59883](https://www.cve.org/CVERecord?id=CVE-2026-59883)\n- [Wiz Vulnerability Database: CVE-2026-59883](https://www.wiz.io/vulnerability-database/cve/cve-2026-59883)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59883) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/afd4e223ed1d8cf62007fc8baac9d771"}, {"timestamp": "2026-10-17T09:45:59Z", "date_only": false, "value": "2026-10-17T09:45:59Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-59883", "record": "UBUNTU-CVE-2026-59883", "field": "modified"}]}