{"action":"Upgrade react/http to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0.8.0"}],"component":"react/http","cve_ids":["CVE-2023-26044"],"ecosystem":"Packagist","epss":0.0068,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-95x4-j7vc-h8mf","id":"tcs_01M5KEZPP1CV0NEEADSG946BDY","modified_at":"2024-02-16T08:21:37.735453Z","published_at":"2023-05-17T17:07:57Z","references":["https://osv.dev/vulnerability/GHSA-95x4-j7vc-h8mf","https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv","https://github.com/reactphp/http/security/advisories/GHSA-95x4-j7vc-h8mf","https://nvd.nist.gov/vuln/detail/CVE-2023-26044","https://github.com/php/php-src/commit/716de0cff539f46294ef70fe75d548cd66766370#diff-81d659aa9e83177ac08151f99cebf21ab331d22462c72a1039f59947e66f5a35","https://github.com/reactphp/http/commit/9681f764b80c45ebfb5fe2ea7da5bd3babfcdcfd","https://github.com/FriendsOfPHP/security-advisories/blob/master/react/http/CVE-2023-26044.yaml","https://github.com/advisories/GHSA-95x4-j7vc-h8mf","https://github.com/reactphp/http","https://github.com/reactphp/http/releases/tag/v1.9.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-95x4-j7vc-h8mf","url":"https://osv.dev/vulnerability/GHSA-95x4-j7vc-h8mf"}],"summary":"ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits"}