CVE-2020-36202
3 advisories.
crates.io/async-h1 CVE-2020-26281, CVE-2020-36202: medium 6.8
Async-h1 request smuggling possible with long unread bodies
Action: Upgrade async-h1 to 2.3.0 or later.
cargo update -p async-h1 --precise 2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-4vr9-8cjf-vf9c
- https://github.com/http-rs/async-h1/security/advisories/GHSA-4vr9-8cjf-vf9c
- https://nvd.nist.gov/vuln/detail/CVE-2020-26281
- https://github.com/http-rs/async-h1
- https://github.com/http-rs/async-h1/releases/tag/v2.3.0
- https://rustsec.org/advisories/RUSTSEC-2020-0093.html
CVE-2020-26281, CVE-2020-36202 · published · modified · JSON
crates.io/async-h1 CVE-2020-26281, CVE-2020-36202: medium 6.1
Async-h1 request smuggling possible with long unread bodies
Action: Upgrade async-h1 to 2.3.0 or later.
cargo update -p async-h1 --precise 2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-c8rq-crxj-mj9m
- https://nvd.nist.gov/vuln/detail/CVE-2020-36202
- https://github.com/http-rs/async-h1
- https://github.com/http-rs/async-h1/releases/tag/v2.3.0
- https://rustsec.org/advisories/RUSTSEC-2020-0093.html
CVE-2020-26281, CVE-2020-36202 · published · modified · JSON
crates.io/async-h1 CVE-2020-26281, CVE-2020-36202: unknown
Async-h1 request smuggling possible with long unread bodies
Action: Upgrade async-h1 to 2.3.0 or later.
cargo update -p async-h1 --precise 2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: RUSTSEC-2020-0093
- https://crates.io/crates/async-h1
- https://rustsec.org/advisories/RUSTSEC-2020-0093.html
- https://github.com/http-rs/async-h1/releases/tag/v2.3.0
CVE-2020-26281, CVE-2020-36202 · published · modified · JSON