Lucene search

Actix-Http Security Vulnerabilities

cve

CVE-2020-35901

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

7.5CVSS

7.4AI Score

0.001EPSS

2020-12-31 09:15 AM

cve

CVE-2021-38512

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.

7.5CVSS

7.2AI Score

0.003EPSS

2021-08-10 11:15 PM