Download Latest Version 3.4.4 source code.tar.gz (47.3 kB)
Email in envelope

Get an email when there's a new version of HTTP Server

Home / v3.4.4
Name Modified Size InfoDownloads / Week
Parent folder
3.4.4 source code.tar.gz 2026-02-08 47.3 kB
3.4.4 source code.zip 2026-02-08 76.5 kB
README.md 2026-02-08 513 Bytes
Totals: 3 Items   124.3 kB 0

What's Changed

Fixed "MadeYouReset" HTTP/2 DoS attack vector described by CVE-2025-8671 and https://kb.cert.org/vuls/id/767506.

Stream reset protection has been refactored to account for the number of reset streams within a sliding time window. Note that your application must expose HTTP/2 connections directly to be affected by this vulnerability. Servers behind a proxy using HTTP/1.x such as nginx are not affected.

Full Changelog: https://github.com/amphp/http-server/compare/v3.4.3...v3.4.4

Source: README.md, updated 2026-02-08