Package · Packagist

php-standard-library/h2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2026-48979

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

PHP Standard Library (PSL) is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA frames match the co…

php-standard-library php-standard-library/h2 php-standard-library php-standard-library/h2 Packagist

Jun 17, 2026