acme-redirect (>=0.1.0, <=0.4.0), actix (>=0.8.0-alpha.2, <=0.9.0) +324 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2, <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0-alpha.2, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.2.2 and more Source cves: CVE-2020-35902 Source advisory: OSV:GHSA-RQGX-HPG4-456R...

CVE-2020-35902

CVE-2020-35902 affects the actix-codec crate prior to 0.3.0-beta.1 for Rust, with a use-after-free in Framed caused by lack of proper pinning. The issue is documented in RUSTSEC-2020-0049 and various feeds (Red Hat, OSV, GHSA). Impact is reflected in CVSS metrics (up to Critical in v3.1, HIGH in ...

acme-redirect (>=0.1.0, <=0.4.0), actix (>=0.8.0-alpha.2, <=0.9.0) +324 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2, <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0-alpha.2, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.2.2 and more Source cves: CVE-2020-35902 Source advisory: OSV:RUSTSEC-2020-0049...