Skip to content
OpenAdvisories

Package · Ubuntu

rust-tiny-http

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    CVE-2026-66753 Public exploit

    tiny-http 0.12.0 HTTP Response Splitting via Header Injection

    tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to insufficient validation in header pars…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu
  • Medium 5.4
    CVE-2026-66752 Public exploit

    tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

    tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditio…

    tiny-http tiny-http rust-tiny-http rust-tiny-http Debian Ubuntu