| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 2.1.10 source code.tar.gz | 2026-02-08 | 46.3 kB | |
| 2.1.10 source code.zip | 2026-02-08 | 68.5 kB | |
| README.md | 2026-02-08 | 514 Bytes | |
| Totals: 3 Items | 115.3 kB | 0 | |
What's Changed
Fixed "MadeYouReset" HTTP/2 DoS attack vector described by CVE-2025-8671 and https://kb.cert.org/vuls/id/767506.
Stream reset protection has been refactored to account for the number of reset streams within a sliding time window. Note that your application must expose HTTP/2 connections directly to be affected by this vulnerability. Servers behind a proxy using HTTP/1.x such as nginx are not affected.
Full Changelog: https://github.com/amphp/http-server/compare/v2.1.9...v2.1.10