Skip to content
OpenAdvisories

Package · Packagist

amphp/http-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.0
    GHSA-8jp9-mpv9-98rj

    amphp/http-client Header leakage on cross-domain redirects

    amphp/http-client has a security weakness that might leak sensitive request headers from the initial request to the redirected host on cross-domain redirects, which were not removed correctly. `Message::setHeaders` does not replace the entire set of headers, …

    amphp/http-client Packagist
  • High 8.2
    GHSA-w8gf-g2vq-j2f4

    amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames

    Early versions of `amphp/http-client` with HTTP/2 support (v4.0.0-rc10 to 4.0.0) will collect HTTP/2 `CONTINUATION` frames in an unbounded buffer and will not check the header size limit until it has received the `END_HEADERS` flag, resulting in an OOM crash.…

    amphp/http-client Packagist
  • High 8.2
    CVE-2024-2653 EPSS 80%

    CVE-2024-2653

    amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.

    AMPHP amphp/http amphp/http-client amphp/http-client Packagist