Merge pull request #717 from kelunik/CVE-2024-2653

Add CVE-2024-2653
FriendsOfPHP · Apr 17, 2024 · 3c56f97 · 3c56f97
2 parents f341f5b + e184c28
commit 3c56f97
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/amphp/http-client/CVE-2024-2653.yaml b/amphp/http-client/CVE-2024-2653.yaml
@@ -0,0 +1,8 @@
+title: Denial of Service via HTTP/2 CONTINUATION Frames
+link: https://github.com/amphp/http-client/security/advisories/GHSA-w8gf-g2vq-j2f4
+cve: CVE-2024-2653
+branches:
+    4.x:
+        time: ~
+        versions: [ '>=4.0.0-rc10', '<=4.0.0' ]
+reference: composer://amphp/http-client
diff --git a/amphp/http/CVE-2024-2653.yaml b/amphp/http/CVE-2024-2653.yaml
@@ -0,0 +1,11 @@
+title: Denial of Service via HTTP/2 CONTINUATION Frames
+link: https://github.com/amphp/http/security/advisories/GHSA-qjfw-cvjf-f4fm
+cve: CVE-2024-2653
+branches:
+    2.x:
+        time: ~
+        versions: ['>=2.0.0', '<=2.1.0']
+    1.x:
+        time: ~
+        versions: [ '<=1.7.2' ]
+reference: composer://amphp/http