Lucene search

K
osvGoogleOSV:GHSA-W65J-G6C7-G3M4
HistoryAug 25, 2021 - 8:42 p.m.

Multiple memory safety issues in actix-web

2021-08-2520:42:50
Google
osv.dev
3

0.002 Low

EPSS

Percentile

59.6%

Affected versions contain multiple memory safety issues, such as:

  • Unsoundly coercing immutable references to mutable references
  • Unsoundly extending lifetimes of strings
  • Adding the Send marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free.

A signficant refactoring effort has been conducted to resolve these issues.

CPENameOperatorVersion
actix-weblt0.7.15

0.002 Low

EPSS

Percentile

59.6%