Skip to content
OpenAdvisories

Package · crates.io

actix-http

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-38512

    HTTP Request Smuggling in actix-http

    An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.

    actix-http crates.io
  • High 7.5
    CVE-2020-35901

    Use-after-free in actix-http

    An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

    actix-http crates.io