[HIGH] PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

PKSA-wz5t-5b2y-qjqk CVE-2026-48979 GHSA-pw9p-jvrm-f7rm

Affected package: php-standard-library/h2

Affected version: >=6.2.0,<6.2.1|>=6.1.0,<6.1.2

Reported by:
GitHub