{"action":"Upgrade actix-http to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"actix-http","cve_ids":["CVE-2021-38512"],"ecosystem":"crates.io","epss":0.0181,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-8928-2fgm-6x9x","id":"tcs_01M5KEVQE95Q780K4SB92A2ZCW","modified_at":"2023-11-08T04:06:27.940101Z","published_at":"2021-08-25T20:58:21Z","references":["https://osv.dev/vulnerability/GHSA-8928-2fgm-6x9x","https://nvd.nist.gov/vuln/detail/CVE-2021-38512","https://github.com/actix/actix-web/pull/2363","https://github.com/actix/actix-web/commit/e965d8298f421e9c89fe98b1300b8361e948c324","https://github.com/actix/actix-web","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67URRW4K47SR6LNQB4YALPLGGQMQK7HO","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-http/RUSTSEC-2021-0081.md","https://rustsec.org/advisories/RUSTSEC-2021-0081.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8928-2fgm-6x9x","url":"https://osv.dev/vulnerability/GHSA-8928-2fgm-6x9x"}],"summary":"HTTP Request Smuggling in actix-http"}