Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011
Project: Drupal core
Date: 2022-June-10
Security risk: Moderately critical 13∕25
Vulnerability: Third-party libraries
CVE IDs: CVE-2022-31042, CVE-2022-31043
Description
Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released two security advisories: