Rreactphp

Products

Exploited and recent CVEs

• CVE-2026-104827 High 7.5 react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS 0.5%
• CVE-2026-84997 High 7.5 react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU 0.7%
• CVE-2023-26044 Medium 5.3 ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits 0.7%
• CVE-2022-36032 Medium 5.3 ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent 1.2%