AskAI (=0.1.0), arrow-flight (>=4.0.0 <=6.4.0) +164 more potentially affected by CVE-2021-21299 via hyper (>=0.14.11 <=0.14.29)

hyper CARGO version =0.14.11, =4.0.0, =0.2.1, =2.2.0, =0.1.0, =0.9.3, =0.11.1, =0.1.0, =0.2.1, =0.2.0, =0.3.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:GHSA-6HFQ-H8HQ-87MF...

CVE-2021-21299

CVE-2021-21299 affects the Rust HTTP library hyper. The vulnerability resides in hyper’s HTTP server code, which may misinterpret requests with multiple Transfer-Encoding headers, potentially treating the payload as chunked when it should be illegal. Exploitation requires three conditions to be m...

CVE-2021-26959

CVE-2021-26959 is rejected/not used; reference CVE-2021-21299.

easy-http-request (>=0.0.5 <=0.1.0), epic-wallet-rust-python (>=0.1.0 <=0.2.0) +8 more potentially affected by CVE-2021-21299 via hyper (>=0.12.12 <=0.12.19)

hyper CARGO version =0.12.12, =0.0.5, =0.1.0, =0.1.0, =3.3.2, =3.3.2, =3.3.2, =3.0.0, =3.0.0, =3.0.0, =3.0.5 Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...