CVE-2026-59883 | Guzzle up to 7.12.2 CookieJar SetCookie::matchesDomain session fixiation

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in Guzzle up to 7.12.2. Affected by this issue is the function SetCookie::matchesDomain of the component CookieJar. Such manipulation leads to session fixiation.

This vulnerability is documented as CVE-2026-59883. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More