CVE-2026-104827

CVE-2026-104827 published: react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStream::handleData() to append response-header bytes to an internal buffer without enforcing a size li...

View full NVD advisory → ← Back to CVE watch