Known Vulnerabilities for products from Actix
Listed below are 8 of the newest known vulnerabilities associated with the vendor "Actix".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-38512 json | An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, p... | 7.5 - HIGH | 2021-08-10 | 2023-11-07 |
| CVE-2020-35902 json | An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. | 9.8 - CRITICAL | 2020-12-31 | 2021-01-07 |
| CVE-2020-35901 json | An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. | 7.5 - HIGH | 2020-12-31 | 2021-01-07 |
| CVE-2020-35899 json | An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than ... | 5.5 - MEDIUM | 2020-12-31 | 2021-01-06 |
| CVE-2020-35898 json | An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than on... | 9.1 - CRITICAL | 2020-12-31 | 2021-01-07 |
| CVE-2018-25026 json | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that can... | 9.8 - CRITICAL | 2021-12-27 | 2022-01-05 |
| CVE-2018-25025 json | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, lead... | 9.8 - CRITICAL | 2021-12-27 | 2022-01-05 |
| CVE-2018-25024 json | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a ... | 9.8 - CRITICAL | 2021-12-27 | 2022-01-05 |
Known software with vulnerabilities from Actix
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Actix | Actix-codec | - |
| Application | Actix | Actix-http | - |
| Application | Actix | Actix-service | - |
| Application | Actix | Actix-utils | - |