Drupal Core - Highly Critical - Injection - SA-CORE-2016-003
"Drupal 8 uses the third-party PHP library Guzzle for making server-side HTTP requests. An attacker can provide a proxy server that Guzzle will use. The details of this are explained at https://httpoxy.org/." 249
url:
https://www.drupal.org/SA-CORE-2016-003
