Skip to content
OpenAdvisories

Product · actix

actix-files

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-72814

    actix-files before 0.6.10 Information Disclosure via Files

    The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the req…

    actix actix-files actix-files rust-actix-files Ubuntu crates.io
  • Medium 6.9
    CVE-2026-72813

    actix-files before 0.6.10 Denial of Service via empty Range header

    actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range…

    actix actix-files actix-files rust-actix-files Ubuntu crates.io