HIGH7.5
GHSA-v3j6-xf77-8r9c
Use-after-free in actix-http
Details
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/actix-http
Introduced in:
0Fixed in: 2.0.0Upgrade actix-http to 2.0.0 or newer (ecosystem crates.io).