Skip to content
OpenAdvisories

Package · Packagist

amphp/http-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    GHSA-w8gf-g2vq-j2f4

    amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames

    Early versions of `amphp/http-client` with HTTP/2 support (v4.0.0-rc10 to 4.0.0) will collect HTTP/2 `CONTINUATION` frames in an unbounded buffer and will not check the header size limit until it has received the `END_HEADERS` flag, resulting in an OOM crash.…

    amphp/http-client Packagist
  • High 8.2
    CVE-2024-2653 EPSS 80%

    CVE-2024-2653

    amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.

    AMPHP amphp/http amphp/http-client amphp/http-client Packagist