Actix Actix-Http
2 CVEs affecting Actix Actix-Http. Latest disclosed: 2021-08-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38512 | High | 7.5 | 2021-08-10 | An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential d… |
CVE-2020-35901 | High | 7.5 | 2020-12-31 | An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. |