{"action":"Upgrade amphp/http-client to 4.1.0-rc1 or later.","affected":[{"fixed":"4.1.0-rc1","introduced":"4.0.0-rc10"}],"component":"amphp/http-client","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.1.0-rc1"],"ghsa_id":"GHSA-w8gf-g2vq-j2f4","id":"tcs_01M5KF9XAGWA8XYY5J6PQ0R3V2","modified_at":"2026-07-08T06:52:51.943094832Z","published_at":"2024-04-03T18:49:42Z","references":["https://osv.dev/vulnerability/GHSA-w8gf-g2vq-j2f4","https://github.com/amphp/http-client/security/advisories/GHSA-w8gf-g2vq-j2f4","https://github.com/amphp/http/security/advisories/GHSA-qjfw-cvjf-f4fm","https://github.com/amphp/http-client"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-w8gf-g2vq-j2f4","url":"https://osv.dev/vulnerability/GHSA-w8gf-g2vq-j2f4"}],"summary":"amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames"}