CVE-2020-35863
2 advisories.
crates.io/hyper CVE-2020-35863: critical 9.8, EPSS 2.97%
HTTP Request Smuggling in hyper
Action: Upgrade hyper to 0.12.34 or later.
cargo update -p hyper --precise 0.12.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.12.34 | - |
Fixed versions
| 0.12.34 |
Sources
- osv: GHSA-h3qr-rq2j-74w4
- https://nvd.nist.gov/vuln/detail/CVE-2020-35863
- https://github.com/hyperium/hyper/issues/1925
- https://github.com/hyperium/hyper
- https://rustsec.org/advisories/RUSTSEC-2020-0008.html
CVE-2020-35863 · published · modified · JSON
crates.io/hyper CVE-2020-35863: critical 9.8, EPSS 2.97%
Flaw in hyper allows request smuggling by sending a body in GET requests
Action: Upgrade hyper to 0.12.34 or later.
cargo update -p hyper --precise 0.12.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.12.34 | - |
Fixed versions
| 0.12.34 |
Sources
- osv: RUSTSEC-2020-0008
- https://crates.io/crates/hyper
- https://rustsec.org/advisories/RUSTSEC-2020-0008.html
- https://github.com/hyperium/hyper/issues/1925
CVE-2020-35863 · published · modified · JSON