Vulnerability GHSA-xhj4-vrgc-hr34
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
6 months ago
April 22, 2026 at 02:37 PM UTC
actix-http has HTTP/1.1 CL.TE Request Smuggling
0.1.0-alpha.1 - 3.12.0
0.1.0-alpha.1 - 3.12.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
8 hours ago
Request smuggling through malformed chunked request trailers
0.1.0-alpha.1 - 3.20.1 RUSTSEC-2026-0446
0.1.0-alpha.1 - 3.20.1 RUSTSEC-2026-0446
Unknown
8 hours ago
Unbounded decompression can exhaust memory and CPU resources
0.1.0-alpha.1 - 3.20.0 RUSTSEC-2026-0448
0.1.0-alpha.1 - 3.20.0 RUSTSEC-2026-0448
Unknown
8 hours ago
Large-window Brotli bodies bypass decompression memory limits
0.1.0-alpha.1 - 3.20.2 RUSTSEC-2026-0455
0.1.0-alpha.1 - 3.20.2 RUSTSEC-2026-0455
High Risk
5 years ago
HTTP Request Smuggling in actix-http
0.1.0-alpha.1 - 2.2.0 GHSA-8928-2fgm-6x9x
0.1.0-alpha.1 - 2.2.0 GHSA-8928-2fgm-6x9x
High Risk
5 years ago
Use-after-free in actix-http
0.1.0-alpha.1 - 2.0.0-beta.4 GHSA-v3j6-xf77-8r9c
0.1.0-alpha.1 - 2.0.0-beta.4 GHSA-v3j6-xf77-8r9c
Impacted packages
Timeline
Published
6 months ago
April 22, 2026 at 02:37 PM UTC
Fixed (3.12.1)
6 months ago
April 18, 2026 at 02:42 AM UTC
Last Modified
1 month ago
September 10, 2026 at 03:51 AM UTC