Skip to content
OpenAdvisories

Package · crates.io

httpsig-hyper

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • High 7.5
    CVE-2026-26275

    httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass

    httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in `httpsig-hyper` prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's `matches!` macro. Specifically, the compariso…

    junkurihara httpsig-rs httpsig-hyper crates.io