Bref (Brefphp) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-03-22. Vendor: Brefphp.

CVEs of Bref

• CVE-2024-29186 - CVSS 5.3 (medium), 2024-03-22: Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven…
• CVE-2024-24754 - CVSS 9.8 (critical), 2024-02-01: Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the…
• CVE-2024-24753 - CVSS 6.5 (medium), 2024-02-01: Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers.…
• CVE-2024-24752 - CVSS 6.5 (medium), 2024-02-01: Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the…