crates.io/actix-files CVE-2026-72813: medium 6.9, EPSS 0.56%
[actix-files] Panic triggered by empty Range header in GET request for static file
Action: Upgrade actix-files to 0.6.10 or later.
cargo update -p actix-files --precise 0.6.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.10 | - |
Fixed versions
| 0.6.10 |
Sources
- osv: GHSA-gcqf-3g44-vc9p
- nvd: CVE-2026-72813
- https://github.com/actix/actix-web/security/advisories/GHSA-gcqf-3g44-vc9p
- https://github.com/actix/actix-web
- https://github.com/actix/actix-web/blob/0383f4bdd1210e726143ca1ebcf01169b67a4b6c/actix-files/src/named.rs#L530-L535
CVE-2026-72813 · published · modified · JSON