CVE-2018-4742

...

CVE-2021-33121

...

CVE-2020-6599

...

CVE-2022-39943

...

CVE-2020-2047

...

CVE-2020-26847

...

CVE-2018-4812

...

CVE-2019-14645

...

CVE-2018-3642

...

Denial of Service via HTTP/2 CONTINUATION Frames

amphp/http will collect HTTP/2 CONTINUATION frames in an unbounded buffer and will not check the header size limit until it has received the ENDHEADERS flag, resulting in an OOM crash. amphp/http-client and amphp/http-server are indirectly affected if they're used with an unpatched version of...