crates.io/vibeio-http: medium

vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths

Action: Upgrade vibeio-http to 0.3.2 or later.

cargo update -p vibeio-http --precise 0.3.2

Affected

Fixed versions

Sources

• osv: GHSA-fx4f-mhw4-qm7j
• https://github.com/ferronweb/vibeio-http
• https://github.com/ferronweb/vibeio-http/blob/main/CHANGELOG.md#vibeio-http-032
• https://rustsec.org/advisories/RUSTSEC-2026-0181.html

published 2026-08-24T22:05:02Z · modified 2026-08-25T02:55:59.491165582Z · JSON