Skip to content
OpenAdvisories

Package · Packagist

amphp/http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-8v5x-6vv5-jv4g

    amphp/http Host Header Injection vulnerability

    amphp/http versions before 1.0.1 allows an attacker to supply invalid input in the Host header which may lead to various type of Host header injection attacks.

    amphp/http Packagist
  • High 8.2
    CVE-2024-2653 EPSS 80%

    CVE-2024-2653

    amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.

    AMPHP amphp/http amphp/http-client amphp/http-client Packagist