crates.io/httpsig-hyper CVE-2026-26275: high 7.5, EPSS 0.28%

Improper Digest Verification in httpsig-hyper May Allow Message Integrity Bypass

Action: Upgrade httpsig-hyper to 0.0.23 or later.

cargo update -p httpsig-hyper --precise 0.0.23

Affected

Fixed versions

Sources

• osv: GHSA-7v42-g35v-xrch
• https://github.com/junkurihara/httpsig-rs/security/advisories/GHSA-7v42-g35v-xrch
• https://nvd.nist.gov/vuln/detail/CVE-2026-26275
• https://github.com/junkurihara/httpsig-rs/pull/14
• https://github.com/junkurihara/httpsig-rs/pull/15
• https://github.com/junkurihara/httpsig-rs/commit/5533f596c650377e02f4aa9e3eb8dba591b87370
• https://github.com/junkurihara/httpsig-rs/commit/65cbd19b395180a4bba09a89746c4b14ccb8d297
• https://github.com/junkurihara/httpsig-rs

CVE-2026-26275 · published 2026-02-17T21:29:34Z · modified 2026-02-20T16:59:14.979005Z · JSON