crates.io/actix-web-lab: medium 5.4
actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects
Action: Upgrade actix-web-lab to 0.26.0 or later.
cargo update -p actix-web-lab --precise 0.26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.26.0 | - |
Fixed versions
| 0.26.0 |
Sources
- osv: GHSA-vhj5-x93p-67jw
- https://github.com/robjtede/actix-web-lab/security/advisories/GHSA-vhj5-x93p-67jw
- https://github.com/robjtede/actix-web-lab/pull/292
- https://github.com/robjtede/actix-web-lab/commit/142c28b82eb59b67445a859a2a9b75e01a9964ee
- https://github.com/robjtede/actix-web-lab
published · modified · JSON