CRITICAL9.8
GHSA-6rhx-hqxm-8p36
Double free in http
Details
An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/http
Introduced in:
0Fixed in: 0.1.20Upgrade http to 0.1.20 or newer (ecosystem crates.io).