Skip to content
OpenAdvisories

Vendor

reactphp

4 known vulnerabilities.

Products

http 4
All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-26044

    ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits

    react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. Th…

    reactphp http react/http php-react-http Ubuntu Packagist
  • Medium 5.3
    CVE-2022-36032

    ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent

    ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP. In ReactPHP's HTTP server component versions starting with 0.7.0 and prior to 1.7.0, when ReactPHP is processing incoming HTTP cookie values, the cookie names are url-decoded. Th…

    reactphp http react/http icingaweb2-module-reactbundle Ubuntu Packagist