If you discover any security related issues, please use the private security issue reporter instead of using the public issue tracker.
You can also send your report to contact@amphp.org.
Do not publish security vulnerability reports publicly.
Repository navigation
Security: amphp/http-server
Security
SECURITY.md
-
HTTP/2 receive flow-control windows are not enforced on incoming DATAGHSA-vgc4-f57m-qgcp published
Nov 1, 2026 by trowskiLow -
HTTP/1 Malformed Chunk Delimiter Allows Request SmugglingGHSA-h3rw-gm3p-6757 published
Nov 1, 2026 by trowskiHigh -
HTTP/2 DDoS vulnerabilityGHSA-8grv-jq2g-cfhw published
Feb 8, 2026 by trowskiModerate
Learn more about advisories related to amphp/http-server in the GitHub Advisory Database