Package · Packagist

amphp/http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.2

CVE-2024-2653 EPSS 80%

CVE-2024-2653

amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.

AMPHP amphp/http amphp/http-client amphp/http-client Packagist

Apr 3, 2024