Skip to content
OpenAdvisories

Vendor

brefphp

4 known vulnerabilities.

Products

bref 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-29186

    Slow String Operations via MultiPart Requests in Event-Driven Functions

    Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the Lambda event is converted …

    brefphp bref bref/bref Packagist
  • Medium 6.5
    CVE-2024-24752

    Bref Uploaded Files Not Deleted in Event-Driven Functions

    Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPar…

    brefphp bref bref/bref Packagist
  • Medium 4.8
    CVE-2024-24753

    Bref Multiple Value Headers Not Supported in ApiGatewayFormatV2

    Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two headers having the same key but different values only the lates…

    brefphp bref bref/bref Packagist