Actix vulnerabilities
11 vulnerabilities
Known vulnerabilities in Actix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Actix Web6 vulnerabilities
- Actix Http2 vulnerabilities
- Actix Codec1 vulnerabilities
- Actix Service1 vulnerabilities
- Actix Utils1 vulnerabilities
CVE-2018-25025actixactix-web+1
EPSS score1.33%
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption.CVE-2018-25024actixactix-web+2EPSS score1.33%
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption.CVE-2018-25026actixactix-web+1EPSS score1.37%
An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory corruption.CVE-2021-38512actixactix-http+2EPSS score1.81%
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.CVE-2020-35898actixactix-utils+1EPSS score1.43%
An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.CVE-2020-35901actixactix-http+1EPSS score1.42%
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.CVE-2020-35899actixactix-service+1EPSS score0.38%
An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.CVE-2020-35902actixactix-codec+1EPSS score1.65%
An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.CVE-2026-73051actixactix-web+3EPSS score0.57%
actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.CVE-2026-72813actixactix-web+2EPSS score0.49%
actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header.CVE-2026-72814actixactix-web+2EPSS score0.47%
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the request path with this empty path and canonicalizes it, causing Rust to resolve it as a relative path. As a result, an attacker can request paths that resolve relative to the application's working directory and access unintended files.