Skip to content
OpenAdvisories

Package · Packagist

httpsoft/http-message

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-9jxr-mwpp-w643

    Improper header validation in httpsoft/http-message

    ### Impact Improper header parsing. An attacker could sneak in a newline (`\n`) into both the header names and values. While the specification states that `\r\n\r\n` is used to terminate the header list, many servers in the wild will also accept `\n\n`. ### P…

    httpsoft/http-message Packagist