CVE-2026-73051
1 advisory.
crates.io/actix-http CVE-2026-73051: medium
actix-http has HTTP/1.1 CL.TE Request Smuggling
Action: Upgrade actix-http to 3.12.1 or later.
cargo update -p actix-http --precise 3.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.1 | - |
Fixed versions
| 3.12.1 |
Sources
- osv: GHSA-xhj4-vrgc-hr34
- https://github.com/actix/actix-web/security/advisories/GHSA-xhj4-vrgc-hr34
- https://github.com/actix/actix-web
- https://github.com/actix/actix-web/releases/tag/http-v3.12.1
- https://www.rfc-editor.org/rfc/rfc9112.html#name-message-body-length
CVE-2026-73051 · published · modified · JSON