VYPR

HTTP

by Reactphp

CVEs (2)

  • CVE-2023-26044MedMay 17, 2023
    risk 0.28cvss 5.3epss 0.01

    react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability…

  • CVE-2022-36032MedSep 6, 2022
    risk 0.28cvss 5.3epss 0.01

    ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP. In ReactPHP's HTTP server component versions starting with 0.7.0 and prior to 1.7.0, when ReactPHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to…