php-standard-library/h2 vulnerabilities

CVEs whose affected-version data names the php-standard-library/h2 package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48979High· 7.5

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

▾ Twilightphp-standard-library · php-standard-library/h2EPSS 0.27%via GHSA

php-standard-library/h2 vulnerabilities (CVEs) · VulnSea