Executive brief
Duplicate Advisory: Guzzle: URI fragments disclosed in redirect Referer headers
Affected products
- Packagist guzzlehttp/guzzle
Junglewise Threat Intelligence
Duplicate Advisory: Guzzle: URI fragments disclosed in redirect Referer headers
Severity: low · CVSS 3.1 · Published 2026-08-01
Technologies: guzzlehttp/guzzle (Packagist). Vendors: Packagist.
Related threats
- Duplicate Advisory: Guzzle: Unbounded response cookies risk denial of service
- Duplicate Advisory: Guzzle: Host-only cookie scope is not preserved
- Guzzle GuzzleHTTP host-only cookie scope disclosure
- Guzzle information disclosure in RedirectMiddleware Referer headers
- Guzzle unbounded response cookies denial of service in CookieJar