Skip to content
OpenAdvisories

Product · junkurihara

httpsig-rs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-26275

    httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass

    httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in `httpsig-hyper` prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's `matches!` macro. Specifically, the compariso…

    junkurihara httpsig-rs httpsig-hyper crates.io