Security vulnerabilities in specific guzzlehttp/guzzle versions

thephpleague / oauth2-client

Easy integration with OAuth 2.0 service providers.

http://oauth2-client.thephpleague.com

MIT License

3.65k stars 751 forks source link

Open gravelld opened 9 months ago

gravelld commented 9 months ago

Thanks for this project. Due to these vulnerabilities:

The minimum version for guzzlehttp/guzzle should be 6.5.8. This means the entry in composer.json should be:

    "guzzlehttp/guzzle": "^6.5.8 || ^7.4.4",

Is this something you are likely to change and issue a release for?