Skip to content
OpenAdvisories

Package · crates.io

async-h1

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.8
    CVE-2020-26281

    request smuggling in async-h1

    async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applicat…

    http-rs async-h1 async-h1 crates.io