crates.io/actix-utils CVE-2020-35898: critical 9.1, EPSS 1.43%

bespoke Cell implementation allows obtaining several mutable references to the same data

Action: Upgrade actix-utils to 2.0.0 or later.

cargo update -p actix-utils --precise 2.0.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0045
• https://crates.io/crates/actix-utils
• https://rustsec.org/advisories/RUSTSEC-2020-0045.html
• https://github.com/actix/actix-net/issues/160

CVE-2020-35898 · published 2020-01-08T12:00:00Z · modified 2023-11-08T04:03:38.175676Z · JSON