crates.io/hyper

Integer Overflow in Chunked Transfer-Encoding

Modified: 9/10/2026

HTTP Request Smuggling in hyper

Modified: 7/8/2026

HTTPS MitM vulnerability due to lack of hostname verification

Modified: 11/8/2023

Lenient Parsing of Content-Length Header When Prefixed with Plus Sign

Modified: 9/10/2026

Parser creates invalid uninitialized value

Modified: 9/10/2026

HTTP Request Smuggling in hyper

Modified: 11/8/2023

Headers containing newline characters can split messages in hyper

Modified: 11/8/2023

HTTPS MitM vulnerability due to lack of hostname verification

Modified: 2/4/2026

headers containing newline characters can split messages

Modified: 11/8/2023

Flaw in hyper allows request smuggling by sending a body in GET requests

Modified: 11/8/2023

Multiple Transfer-Encoding headers misinterprets request payload

Modified: 11/8/2023

Lenient `hyper` header parsing of `Content-Length` could allow request smuggling

Modified: 11/8/2023

Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss

Modified: 11/8/2023

Parser creates invalid uninitialized value

Modified: 11/8/2023