Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS04djV4LTZ2djUtanY0Z84AA8GL

amphp/http Host Header Injection vulnerability

amphp/http versions before 1.0.1 allows an attacker to supply invalid input in the Host header which may lead to various type of Host header injection attacks.

Permalink: https://github.com/advisories/GHSA-8v5x-6vv5-jv4g
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04djV4LTZ2djUtanY0Z84AA8GL
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 7 months ago
Updated: 7 months ago

Identifiers: GHSA-8v5x-6vv5-jv4g
References:

• https://github.com/amphp/http/pull/4
• https://github.com/amphp/http/commit/16e465fa82555104d1cff98cb8e412295a380214
• https://github.com/FriendsOfPHP/security-advisories/blob/master/amphp/http/2018-03-15.yaml
• https://github.com/amphp/http/releases/tag/v1.0.1
• https://github.com/advisories/GHSA-8v5x-6vv5-jv4g

Repository: https://github.com/amphp/http
Blast Radius: 0.0

Affected Packages