Skip to content
OpenAdvisories

Package · Ubuntu

php-react-http

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • High 7.5
    CVE-2026-104827

    react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS

    react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStream::handleData() to append response-header bytes to an internal buffer without enforcing a size limi…

    reactphp http react/http php-react-http Ubuntu Packagist
  • Medium 5.3
    CVE-2023-26044

    ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits

    react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. Th…

    reactphp http react/http php-react-http Ubuntu Packagist