Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-7v42-g35v-xrch
  • crates.io/httpsig-hyper
 Improper Digest Verification in httpsig-hyper May Allow Message Integrity Bypass 17 Feb
  • Fix available
  • Severity - 7.5 (High)
GHSA-5wvv-q5fv-2388
  • crates.io/hyper-staticfile
 hyper-staticfile's location header incorporates user input, allowing open redirect 30 Dec 2022
  • Fix available
RUSTSEC-2022-0072
  • crates.io/hyper-staticfile
 Location header incorporates user input, allowing open redirect 23 Dec 2022
  • Fix available
GHSA-7p7c-pvvx-2vx3
  • crates.io/hyper-staticfile
 hyper-staticfile's improper validation of Windows paths could lead to directory traversal attack 05 Dec 2022
  • Fix available
RUSTSEC-2022-0069
  • crates.io/hyper-staticfile
 Improper validation of Windows paths could lead to directory traversal attack 30 Nov 2022
  • Fix available
GHSA-9398-5ghf-7pr6
  • crates.io/conduit-hyper
 conduit-hyper vulnerable to Denial of Service from unchecked request length 31 Oct 2022
  • Fix available
  • Severity - 7.5 (High)
RUSTSEC-2022-0066
  • crates.io/conduit-hyper
 Denial of Service from unchecked request length 30 Oct 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-f67m-9j94-qv9j
  • crates.io/hyper
 Parser creates invalid uninitialized value 16 Jun 2022
  • Fix available
RUSTSEC-2022-0022
  • crates.io/hyper
 Parser creates invalid uninitialized value 10 May 2022
  • Fix available
GHSA-6hfq-h8hq-87mf
  • crates.io/hyper
 HTTP Request Smuggling in hyper 25 Aug 2021
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-h3qr-rq2j-74w4
  • crates.io/hyper
 HTTP Request Smuggling in hyper 25 Aug 2021
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-9xjr-m6f3-v5wm
  • crates.io/hyper
 HTTPS MitM vulnerability due to lack of hostname verification 25 Aug 2021
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-q89x-f52w-6hj2
  • crates.io/hyper
 Headers containing newline characters can split messages in hyper 25 Aug 2021
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5h46-h7hh-c6x9
  • crates.io/hyper
 Integer Overflow in Chunked Transfer-Encoding 12 Jul 2021
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-f3pg-qwvg-p99c
  • crates.io/hyper
 Lenient Parsing of Content-Length Header When Prefixed with Plus Sign 12 Jul 2021
  • Fix available
  • Severity - 3.1 (Low)
RUSTSEC-2021-0078
  • crates.io/hyper
 Lenient `hyper` header parsing of `Content-Length` could allow request... 07 Jul 2021
  • Fix available
  • Severity - 5.3 (Medium)
Load more...