Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-2653
Description
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
amphp/http
GitHubHTTP primitives which can be shared by servers and clients.
GitHubHTTP primitives which can be shared by servers and clients.>= 2.0.0, < 2.1.1, < 1.7.3NVD
amphp/http-clientGitHubAn advanced async HTTP client library for PHP, enabling efficient, non-blocking, and concurrent requests and responses.
GitHubAn advanced async HTTP client library for PHP, enabling efficient, non-blocking, and concurrent requests and responses.>= 4.0.0-rc10, <= 4.0.0NVD