crates.io/actix-codec CVE-2020-35902: critical 9.8, EPSS 1.65%

Use-after-free in actix-codec

Action: Upgrade actix-codec to 0.3.0 or later.

cargo update -p actix-codec --precise 0.3.0

Affected

Fixed versions

Sources

• osv: GHSA-rqgx-hpg4-456r
• https://nvd.nist.gov/vuln/detail/CVE-2020-35902
• https://github.com/actix/actix-net/issues/91
• https://github.com/actix/actix-net/commit/c41b5d8dd4235ccca84d0b687996615c0c64d956
• https://github.com/actix/actix-net
• https://rustsec.org/advisories/RUSTSEC-2020-0049.html

CVE-2020-35902 · published 2021-08-25T20:49:45Z · modified 2025-05-23T18:30:34Z · JSON