Advisories for packages from amphp

Listing reported advisories for packages from amphp sorted by their report date.

amphp/http-server affected by HTTP/2 DDoS vulnerability
GitHub

amphp/http-server

>= 3.0.0-beta.1, < 3.4.4 · >= 2.0.0-rc1, < 2.1.10

2026-02-10 00:25:45
amphp/http Host Header Injection vulnerability
GitHub

amphp/http

< 1.0.1

2024-05-15 17:52:42
amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance
GitHub

amphp/artax

>= 2, < 2.0.6 · < 1.0.6

2024-05-15 17:52:01
amphp/http-client Header leakage on cross-domain redirects
GitHub

amphp/http-client

>= 4.0.0, < 4.4.0

2024-05-15 17:48:10
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
GitHub

amphp/http

>= 4.0.0-rc10, <= 4.0.0 · >= 2.0.0, <= 2.1.0 · <= 1.7.2

2024-04-17 17:05:44
amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames
GitHub

amphp/http-client

>= 4.0.0-rc10, <= 4.0.0

2024-04-03 18:49:43
Header leakage on cross-domain redirects
FriendsOfPHP

amphp/http-client

>=4, <4.4.0

2020-06-16 20:55:00
Incorrect header injection check
FriendsOfPHP

amphp/http

<1.0.1

2018-03-15 17:25:00
Cookie leakage to wrong origins and non-restricted cookie acceptance
FriendsOfPHP

amphp/artax

>=2, <2.0.6 · <1.0.6

2017-05-09 19:42:02
HTTP Proxy header vulnerability
FriendsOfPHP

amphp/artax

>0.7.1, <1.0.4 · >=2, <2.0.4

2016-07-18 16:37:40

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch