Actix-http Security Vulnerabilities and Issues — Actix-http CVE List

Lucene search

ActixActix-http

2 matches found

CVE•added 2021/08/10 11:15 p.m.•89 views

CVE-2021-38512

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.

7.5CVSS7.2AI score0.00422EPSS

CVE•added 2020/12/31 9:15 a.m.•41 views

CVE-2020-35901

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

7.5CVSS7.4AI score0.00393EPSS