Actix Http

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-38512 Cargo HIGH POC PATCH This Week

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Request Smuggling Information Disclosure Actix Http Fedora

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2020-35901 Cargo HIGH POC PATCH This Week

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Use After Free Memory Corruption Information Disclosure Actix Http

NVD

CVSS 3.1

7.5

EPSS

1.4%

CVE-2021-38512 Cargo

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Request Smuggling Information Disclosure Actix Http +1

NVD

CVE-2020-35901 Cargo

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

Use After Free Memory Corruption Information Disclosure +1

NVD