Vulnerability GHSA-8928-2fgm-6x9x
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
5 years ago
August 25, 2021 at 08:58 PM UTC
HTTP Request Smuggling in actix-http
0.1.0-alpha.1 - 2.2.0
0.1.0-alpha.1 - 2.2.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
8 hours ago
Request smuggling through malformed chunked request trailers
0.1.0-alpha.1 - 3.20.1 RUSTSEC-2026-0446
0.1.0-alpha.1 - 3.20.1 RUSTSEC-2026-0446
Unknown
8 hours ago
Unbounded decompression can exhaust memory and CPU resources
0.1.0-alpha.1 - 3.20.0 RUSTSEC-2026-0448
0.1.0-alpha.1 - 3.20.0 RUSTSEC-2026-0448
Unknown
8 hours ago
Large-window Brotli bodies bypass decompression memory limits
0.1.0-alpha.1 - 3.20.2 RUSTSEC-2026-0455
0.1.0-alpha.1 - 3.20.2 RUSTSEC-2026-0455
Medium Risk
6 months ago
actix-http has HTTP/1.1 CL.TE Request Smuggling
0.1.0-alpha.1 - 3.12.0 GHSA-xhj4-vrgc-hr34
0.1.0-alpha.1 - 3.12.0 GHSA-xhj4-vrgc-hr34
High Risk
5 years ago
Use-after-free in actix-http
0.1.0-alpha.1 - 2.0.0-beta.4 GHSA-v3j6-xf77-8r9c
0.1.0-alpha.1 - 2.0.0-beta.4 GHSA-v3j6-xf77-8r9c
Impacted packages
Timeline
Published
5 years ago
August 25, 2021 at 08:58 PM UTC
Fixed (2.2.1)
5 years ago
August 09, 2021 at 09:04 AM UTC
Last Modified
2 years ago
November 08, 2023 at 04:06 AM UTC