amphp/http-client
GitHub
Releases122
Frequency1 month 1 week
Last Release
Stars729
An advanced async HTTP client library for PHP, enabling efficient, non-blocking, and concurrent requests and responses.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| >= 4.0.0-rc10, <= 4.0.0 | 8.2 HIGH | — | ||
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash. | ||||
| < 1.0.8 | 6.3 MEDIUM | 5 MEDIUM | ||
Actions Http-Client (NPM @actions/http-client) before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redirect scenarios. The conditions in which this happens are if consumers of the http-client: 1. make an http request with an authorization header 2. that request leads to a redirect (302) and 3. the redirect url redirects to another domain or hostname Then the authorization header will get passed to the other domain. The problem is fixed in version 1.0.8. | ||||