| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 3.4.4 source code.tar.gz | 2026-02-08 | 47.3 kB | |
| 3.4.4 source code.zip | 2026-02-08 | 76.5 kB | |
| README.md | 2026-02-08 | 513 Bytes | |
| Totals: 3 Items | 124.3 kB | 0 | |
What's Changed
Fixed "MadeYouReset" HTTP/2 DoS attack vector described by CVE-2025-8671 and https://kb.cert.org/vuls/id/767506.
Stream reset protection has been refactored to account for the number of reset streams within a sliding time window. Note that your application must expose HTTP/2 connections directly to be affected by this vulnerability. Servers behind a proxy using HTTP/1.x such as nginx are not affected.
Full Changelog: https://github.com/amphp/http-server/compare/v3.4.3...v3.4.4