CVE-2020-35863

2020-12-3110:15:15

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.6%

JSON

An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.

CPENameOperatorVersion
hypereq0.12.31
hypereq0.6.1
hypereq0.12.24
hypereq0.3.3
hypereq0.11.1
hypereq0.6.5
hypereq0.6.12
hypereq0.6.0
hypereq0.1.9
hypereq0.12.33