{"action":"Upgrade http to 0.1.20 or later.","affected":[{"fixed":"0.1.20","introduced":"0"}],"component":"http","cve_ids":["CVE-2019-25008","CVE-2020-25574"],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.20"],"ghsa_id":"GHSA-x7vr-c387-8w57","id":"tcs_01M5KF4N4V0VMGRN1GX200CG85","modified_at":"2026-09-10T03:49:15.774183736Z","published_at":"2021-08-25T21:01:31Z","references":["https://osv.dev/vulnerability/GHSA-x7vr-c387-8w57","https://nvd.nist.gov/vuln/detail/CVE-2020-25574","https://github.com/hyperium/http/issues/352","https://github.com/hyperium/http","https://rustsec.org/advisories/RUSTSEC-2019-0033.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x7vr-c387-8w57","url":"https://osv.dev/vulnerability/GHSA-x7vr-c387-8w57"}],"summary":"Integer Overflow/Infinite Loop in the http crate"}