Skip to content
Threat Feed
Subscribe

Vendor

ReactPHP

2 briefs RSS
low advisory

Unbounded HTTP Response Header Buffering in react/http

The react/http library is vulnerable to a memory exhaustion Denial of Service (DoS) due to the lack of size constraints on incoming HTTP response headers (CVE-2026-104827).

react/http
1t 1c
low advisory

Denial of Service via Malformed HTTP Chunked Encoding in react/http

A malformed HTTP chunked body triggers an infinite loop in the react/http ChunkedDecoder, causing 100% CPU usage and service disruption in both server and client implementations.

react/http denial-of-service php vulnerability
1t 1c