CVE-2020-35884

CVE-2020-35884 affects the Rust tiny_http crate (through 2020-06-16). The issue enables HTTP Request smuggling via a malformed Transfer-Encoding header, as described in the CVE entry. The vulnerability is associated with partial confidentiality and partial integrity impact (per NVD CVSS metrics)....

CVE-2017-16097

CVE-2017-16097 concerns the tiny-http library, a simple HTTP server. The accompanying advisories describe a directory traversal vulnerability where crafted URLs containing relative paths (e.g., ../) allow access to files outside the intended root. Affected versions resolve relative file paths imp...