VYPR

CookieJar

by Guzzle

Source repositories

CVEs (1)

  • CVE-2026-55767MedJun 23, 2026
    risk 0.31cvss 5.8epss 0.00

    Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar incorrectly accepts cookies with a dot-only Domain attribute and whitespace-padded variants. SetCookie::matchesDomain() removes leading dots from the cookie domain, normalizing dot-only values to the empty…