crates.io/hyper CVE-2020-35863: critical 9.8, EPSS 2.97%

HTTP Request Smuggling in hyper

Action: Upgrade hyper to 0.12.34 or later.

cargo update -p hyper --precise 0.12.34

Affected

Fixed versions

Sources

• osv: GHSA-h3qr-rq2j-74w4
• https://nvd.nist.gov/vuln/detail/CVE-2020-35863
• https://github.com/hyperium/hyper/issues/1925
• https://github.com/hyperium/hyper
• https://rustsec.org/advisories/RUSTSEC-2020-0008.html

CVE-2020-35863 · published 2021-08-25T20:46:08Z · modified 2023-11-08T04:03:36.218103Z · JSON