Vulnerabilities

TI-2026-74656 CVE-2026-104827 · GHSA-g4f2-2pf3-2pwj

Unbounded header buffering in ReactPHP HTTP client exhausts memory

LOW 39

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2026-10-15 Fixed in 1.11.1 CWE-770

TI-2026-58400 CVE-2026-84997 · GHSA-x424-64qh-5j54

HIGH 72

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00655 Published 2026-09-16 Fixed in 1.11.1 CWE-835

TI-2023-11278 CVE-2023-26044 · GHSA-95x4-j7vc-h8mf

LOW 31

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0068 Published 2023-05-17 Fixed in 1.9.0 CWE-400

TI-2022-16457 CVE-2022-36032 · GHSA-w3w9-vrf5-8mx8

LOW 32

ReactPHP HTTP is a streaming HTTP client and server implementation for ReactPHP.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01206 Published 2022-09-06 Fixed in 1.7.0 CWE-20