amphp/http Host Header Injection vulnerability
amphp/http versions before 1.0.1 allows an attacker to supply invalid input in the Host header which may lead to various type of Host header injection attacks.
- Update to 1.0.1
Published Updated
PatchFirst · Latest vulnerabilities
amphp/http vulnerabilities
Vulnerabilities published for amphp/http in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2024-2653
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
- Update to 1.7.3
- Update to 2.1.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.