amphp/http

Security advisories for amphp/http, newest first. 2 known, 1 without a fix yet.

RSS feed Check your lock file →

Latest version

2.1.2

Advisories

2 · 1 unfixed

Last advisory

1 Jan 2024

Safe from

no fix for all yet

2 advisories · newest first

HIGH8.2 1 Jan 2024

Denial of Service via HTTP/2 CONTINUATION Frames

GHSA-qjfw-cvjf-f4fm · CVE-2024-2653

Affected

≤ 1.7.2 ≥ 2.0.0, ≤ 2.1.0

Fixed in

no fix yet

Published

1 Jan 2024

MODERATE 15 Mar 2018

Incorrect header injection check

PKSA-wqth-x531-fs9q

Affected

< 1.0.1

Fixed in

1.0.1

Published

15 Mar 2018

/advisories/composer/amphp/http/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

amphp/http-client3 advisories

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →