{"action":"Upgrade conduit-hyper to 0.4.2 or later.","affected":[{"fixed":"0.4.2","introduced":"0.2.0-alpha.3"}],"component":"conduit-hyper","cve_ids":["CVE-2022-39294"],"ecosystem":"crates.io","epss":0.00814,"exploited":false,"fixed_versions":["0.4.2"],"ghsa_id":"GHSA-9398-5ghf-7pr6","id":"tcs_01M5KF813VNT841JVVPPWTNRHH","modified_at":"2026-10-12T18:00:05.116359517Z","published_at":"2022-10-30T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0066","https://crates.io/crates/conduit-hyper","https://rustsec.org/advisories/RUSTSEC-2022-0066.html","https://github.com/conduit-rust/conduit-hyper/commit/4d225a53206505d39438ec6694e15f49c038baff"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0066","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0066"}],"summary":"Denial of Service from unchecked request length"}