Skip to content

ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent

Moderate severity GitHub Reviewed Published Sep 6, 2022 in reactphp/http • Updated Jan 27, 2023

No closed alerts for this advisory

Give feedback on Dependabot alerts