Debian/rust-actix-http: unknown
actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthen
Action: Upgrade rust-actix-http to 3.13.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.13.1-1 | - |
Fixed versions
| 3.13.1-1 |
Sources
- osv: DEBIAN-CVE-2026-73051#Debian:14/rust-actix-http
- https://security-tracker.debian.org/tracker/CVE-2026-73051
published · modified · JSON