Description
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | actix-http | < 2.2.1 | 2.2.1 | GHSA-8928-2fgm-6x9x |
| crates.io | actix-http | >= 0.0.0-0, < 2.2.1 · >= 3.0.0-0, < 3.0.0-beta.9 | 2.2.1, 3.0.0-beta.9 | RUSTSEC-2021-0081 |