Packagist/amphp/http-server: medium 5.3
amphp/http-server affected by HTTP/2 DDoS vulnerability
Action: Upgrade amphp/http-server to 2.1.10 or later.
composer require amphp/http-server:3.4.4composer require amphp/http-server:2.1.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0-beta.1 | 3.4.4 | - |
| 2.0.0-rc1 | 2.1.10 | - |
Fixed versions
| 3.4.4 | 2.1.10 |
Sources
- osv: GHSA-8grv-jq2g-cfhw
- https://github.com/amphp/http-server/security/advisories/GHSA-8grv-jq2g-cfhw
- https://github.com/amphp/http-server
- https://github.com/amphp/http-server/releases/tag/v2.1.10
- https://github.com/amphp/http-server/releases/tag/v3.4.4
published · modified · JSON