Actix Http vulnerabilities

2 vulnerabilities

Known vulnerabilities in Actix Http, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2021-38512actix · actix-http +2 moreactix actix-httpAn issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.EPSS1.81%7.5HighCVE-2020-35901actix · actix-http +1 moreactix actix-httpAn issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.EPSS1.42%