Packagist (Composer) package
amphp/http-client
pkg:composer/amphp/http-client
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2653 | Hig | 8.2 | >= 4.0.0-rc10, <= 4.0.0 | — | Apr 3, 2024 | amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. |
- affected >= 4.0.0-rc10, <= 4.0.0
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.