Skip to content
OpenAdvisories

Package · Debian

rust-tiny-http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-66752 Public exploit

    tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

    tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditio…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu