MEDIUM
GHSA-w65j-g6c7-g3m4
Multiple memory safety issues in actix-web
Details
Affected versions contain multiple memory safety issues, such as:
- Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the `Send` marker trait to objects that cannot be safely sent between threads
This may result in a variety of memory corruption scenarios, most likely use-after-free. A signficant refactoring effort has been conducted to resolve these issues.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/actix-web
Introduced in:
0Fixed in: 0.7.19Upgrade actix-web to 0.7.19 or newer (ecosystem crates.io).