CVE-2026-72814 actix-web before 0.6.10 Information Disclosure via Files

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...

Denial of Service (DoS)

Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on...

PT-2026-71984

Name of the Vulnerable Software and Affected Versions actix-files versions prior to 0.6.10 Description An information exposure issue exists when a non-existing folder is provided as the serve from argument to the Files::new function. In this scenario, the mount path defaults to an empty path, and...