Packagist (Composer) package
amphp/http
pkg:composer/amphp/http
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2653 | Hig | 8.2 | >= 2.0.0, < 2.1.1 | 2.1.1 | Apr 3, 2024 | amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. |
- affected >= 2.0.0, < 2.1.1fixed 2.1.1
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.