Vulnerabilities

TI-2026-51260 CVE-2026-73051 · GHSA-rh8q-rpf9-79v6

actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

LOW 29

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00566 Published 2026-08-14 Partial fix · 3.12.1 CWE-444

TI-2026-51040 CVE-2026-72814 · GHSA-f87p-3w4v-5q9x

actix-files before 0.6.10 Information Disclosure via Files

HIGH 67

The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00469 Published 2026-08-14 Partial fix · 0.6.10 CWE-22

TI-2026-51039 CVE-2026-72813 · GHSA-v47c-94r2-rjm7

actix-files before 0.6.10 Denial of Service via empty Range header

HIGH 70

actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00491 Published 2026-08-14 Partial fix · 0.6.10 CWE-248

TI-2018-15251 CVE-2018-25024 · GHSA-9qj6-4rfq-vm84

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

MEDIUM 45

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01331 Published 2021-12-26 Fixed in 0.7.19 CWE-787

TI-2018-15252 CVE-2018-25025 · GHSA-fgfm-hqjw-3265

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

MEDIUM 45

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01331 Published 2021-12-26 Fixed in 0.7.19 CWE-787

TI-2018-15253 CVE-2018-25026 · GHSA-7x36-h62w-vw65

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

MEDIUM 45

An issue was discovered in the actix-web crate before 0.7.15 for Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01368 Published 2021-12-26 Fixed in 0.7.19 CWE-787

TI-2021-16112 CVE-2021-38512 · GHSA-8928-2fgm-6x9x

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust.

LOW 36

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0181 Published 2021-08-10 Fixed in 2.2.1 CWE-444

TI-2020-18341 CVE-2020-35898 · GHSA-hhw2-pqhf-vmx2

An issue was discovered in the actix-utils crate before 2.0.0 for Rust.

MEDIUM 42

An issue was discovered in the actix-utils crate before 2.0.0 for Rust.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01428 Published 2020-12-31 Fixed in 2.0.0 CWE-416

TI-2020-18342 CVE-2020-35899 · GHSA-whc7-5p35-4ww2

An issue was discovered in the actix-service crate before 1.0.6 for Rust.

LOW 25

An issue was discovered in the actix-service crate before 1.0.6 for Rust.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00379 Published 2020-12-31 Fixed in 1.0.6 CWE-416

TI-2020-18344 CVE-2020-35901 · GHSA-v3j6-xf77-8r9c

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust.

LOW 36

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01423 Published 2020-12-31 Fixed in 2.0.0 CWE-416

TI-2020-18345 CVE-2020-35902 · GHSA-rqgx-hpg4-456r

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust.

MEDIUM 45

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01649 Published 2020-12-31 Fixed in 0.3.0 CWE-416

Vulnerabilities

Filters