Skip to content
OpenAdvisories

Package · crates.io

actix-web-lab

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    GHSA-vhj5-x93p-67jw

    actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects

    ### Summary `actix-web-lab` redirect middleware uses request-derived host information to construct absolute redirect URLs (for example, `https://{hostname}{path}`). In deployments without strict host allowlisting, an attacker can supply a malicious Host heade…

    actix-web-lab crates.io