VDB
Sign up
MEDIUM

GHSA-w65j-g6c7-g3m4

Multiple memory safety issues in actix-web

Details

Affected versions contain multiple memory safety issues, such as:

- Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the `Send` marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free. A signficant refactoring effort has been conducted to resolve these issues.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/actix-web
Introduced in: 0Fixed in: 0.7.19

Upgrade actix-web to 0.7.19 or newer (ecosystem crates.io).

References