amphp/http-client

Security advisories for amphp/http-client, newest first. 3 known, 1 without a fix yet.

RSS feed Check your lock file →

Latest version

5.3.6

Advisories

3 · 1 unfixed

Last advisory

15 May 2024

Safe from

no fix for all yet

3 advisories · newest first

MODERATE4.0 15 May 2024

amphp/http-client Header leakage on cross-domain redirects

GHSA-8jp9-mpv9-98rj

Affected

≥ 4.0.0, < 4.4.0

Fixed in

4.4.0

Published

15 May 2024

HIGH8.2 1 Jan 2024

Denial of Service via HTTP/2 CONTINUATION Frames

GHSA-w8gf-g2vq-j2f4 · CVE-2024-2653

Affected

≥ 4.0.0-rc10, ≤ 4.0.0

Fixed in

no fix yet

Published

1 Jan 2024

HIGH 16 Jun 2020

Header leakage on cross-domain redirects

PKSA-58fs-7xtr-x4q5

Affected

≥ 4, < 4.4.0

Fixed in

4.4.0

Published

16 Jun 2020

/advisories/composer/amphp/http-client/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

amphp/http2 advisories

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →