Vendors / actix Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 2
Exploited now actix records in CISA KEV No actix vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00491 · Published 2026-08-14 · Partial fix · 0.6.10 CWE-248
Priority HIGH 67
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00469 · Published 2026-08-14 · Partial fix · 0.6.10 CWE-22
Priority MEDIUM 45
An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01649 · Published 2020-12-31 · Fixed in 0.3.0 CWE-416
Priority MEDIUM 45
An issue was discovered in the actix-web crate before 0.7.15 for Rust.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01368 · Published 2021-12-26 · Fixed in 0.7.19 CWE-787
Priority MEDIUM 45
An issue was discovered in the actix-web crate before 0.7.15 for Rust.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01331 · Published 2021-12-26 · Fixed in 0.7.19 CWE-787
Priority MEDIUM 45
An issue was discovered in the actix-web crate before 0.7.15 for Rust.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01331 · Published 2021-12-26 · Fixed in 0.7.19 CWE-787
Priority MEDIUM 42
An issue was discovered in the actix-utils crate before 2.0.0 for Rust.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01428 · Published 2020-12-31 · Fixed in 2.0.0 CWE-416
Priority LOW 36
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0181 · Published 2021-08-10 · Fixed in 2.2.1 CWE-444
Priority LOW 36
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01423 · Published 2020-12-31 · Fixed in 2.0.0 CWE-416
Priority LOW 29
actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00566 · Published 2026-08-14 · Partial fix · 3.12.1 CWE-444
Priority LOW 25
An issue was discovered in the actix-service crate before 1.0.6 for Rust.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2020-12-31 · Fixed in 1.0.6 CWE-416
Open these records in search → All records by CVSS severity
5 2 4 0 0
THREATIST.IORead the docs