https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 03:48:16 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-67353 <p>guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> <p>guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-67353 https://vulnerability.circl.lu/vuln/ghsa-3fvr-2jw6-crq4 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Packagist: guzzlehttp/guzzle</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-f283-ghqc-fg79. This link is maintained to preserve external references.</p> <p>## Original Description guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Packagist: guzzlehttp/guzzle</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-f283-ghqc-fg79. This link is maintained to preserve external references.</p> <p>## Original Description guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> https://vulnerability.circl.lu/vuln/ghsa-3fvr-2jw6-crq4 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-67353 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: guzzle, Ubuntu:26.04:LTS: guzzle</p> <p>guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: guzzle, Ubuntu:26.04:LTS: guzzle</p> <p>guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and generate oversized Cookie headers that fail in handlers or destination servers.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-67353