Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

php-http/client-common

              2.x @ dcc6de2
            

Fixes

CVEs

MEDIUM

Peak severity

40.0%

Coverage

Highlights

Cookie Leakage: 2 prior fixes. Scrutinize any change in this area.

src/Plugin/CookiePlugin.php: most-fixed (3 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cookie Leakage: Insecure substring matching on domains allows cookies from a legitimate domain to be leaked to malicious hosts sharing suffixes or substring patterns (e.g., target.com.attacker.org).

Auth Bypass: Inverting domain validation logic (e.g., using strpos incorrectly) can lead to cookies being injected or sent to domains entirely outside the intended subdomain scope.

SSRF: Cross-domain redirects that retain the original request port during URI rewriting can be used to scan arbitrary internal ports or redirect traffic to unauthorized endpoints.