crates.io/hyper CVE-2021-21299: high 8.1, EPSS 4.79%
Multiple Transfer-Encoding headers misinterprets request payload
Action: Upgrade hyper to 0.12.36 or later.
cargo update -p hyper --precise 0.12.36cargo update -p hyper --precise 0.13.10cargo update -p hyper --precise 0.14.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.12.0 | 0.12.36 | - |
| 0.13.0-0 | 0.13.10 | - |
| 0.14.0-0 | 0.14.3 | - |
Fixed versions
| 0.12.36 | 0.13.10 | 0.14.3 |
Sources
- osv: RUSTSEC-2021-0020
- https://crates.io/crates/hyper
- https://rustsec.org/advisories/RUSTSEC-2021-0020.html
- https://github.com/hyperium/hyper/commit/8f93123efef5c1361086688fe4f34c83c89cec02
CVE-2021-21299 · published · modified · JSON