Download Latest Version 3.4.4 source code.tar.gz (47.3 kB)
Email in envelope

Get an email when there's a new version of HTTP Server

Home / v2.1.10
Name Modified Size InfoDownloads / Week
Parent folder
2.1.10 source code.tar.gz 2026-02-08 46.3 kB
2.1.10 source code.zip 2026-02-08 68.5 kB
README.md 2026-02-08 514 Bytes
Totals: 3 Items   115.3 kB 0

What's Changed

Fixed "MadeYouReset" HTTP/2 DoS attack vector described by CVE-2025-8671 and https://kb.cert.org/vuls/id/767506.

Stream reset protection has been refactored to account for the number of reset streams within a sliding time window. Note that your application must expose HTTP/2 connections directly to be affected by this vulnerability. Servers behind a proxy using HTTP/1.x such as nginx are not affected.

Full Changelog: https://github.com/amphp/http-server/compare/v2.1.9...v2.1.10

Source: README.md, updated 2026-02-08