Repository navigation
Security: reactphp/http
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS in react/httpGHSA-g4f2-2pf3-2pwj published
Sep 9, 2026 by clueHigh -
A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUGHSA-x424-64qh-5j54 published
Sep 9, 2026 by clueHigh -
ReactPHP's HTTP server continues parsing unused multipart parts after reaching limitsGHSA-95x4-j7vc-h8mf published
May 17, 2023 by clueModerate -
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sentGHSA-w3w9-vrf5-8mx8 published
Sep 6, 2022 by WyriHaximusModerate
Learn more about advisories related to reactphp/http in the GitHub Advisory Database