Skip to content
OpenAdvisories

Package · crates.io

http-types

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    RUSTSEC-2026-0174

    `Authorization::value` and `WwwAuthenticate::value` can violate ASCII invariants

    `Authorization::value` uses `HeaderValue::value` with the claim that the internal string is ASCII, but `Authorization::new` and `Authorization::set_credentials` accept arbitrary `String` credentials without validation. As a result, safe code can construct a h…

    http-types crates.io