Actix Security Vulnerabilities
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential...
7.5CVSS
7.3AI Score
0.003EPSS
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory...
9.8CVSS
9.3AI Score
0.002EPSS
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory...
9.8CVSS
9.3AI Score
0.002EPSS
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory...
9.8CVSS
9.3AI Score
0.002EPSS
An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same...
5.5CVSS
5.4AI Score
0.0004EPSS
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in...
7.5CVSS
7.5AI Score
0.001EPSS
An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same...
9.1CVSS
9.1AI Score
0.001EPSS
An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in...
9.8CVSS
9.4AI Score
0.005EPSS