27 matches found
CVE-2017-18587
An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers...
Hardcoded credentials
An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers...
CVE-2017-18587
An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers...
CVE-2017-18587
An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers...
CVE-2017-18587
CVE-2017-18587 (hyper crate, Rust) affects the hyper crate before 0.9.18, where header values mishandled newline characters in serialization. This can allow header fragmentation/splitting of requests or responses due to newline handling in header values. The issue is documented across multiple so...
CVE-2016-10932
The CVE-2016-10932 issue affects the hyper crate for Rust on Windows before version 0.9.4, where hostname verification was omitted during HTTPS, enabling potential Man‑in‑the‑Middle (MitM) attacks. Root cause: missing hostname verification in TLS on Windows builds. Impact: interception or tamperi...