Approved changes feed: RSS · Atom

cpe:2.3:a:actix:actix-http:3.0.0:-:*:*:*:rust:*:*

part: a version: 3.0.0 update: -

VendorActix (8ede6df3-adfd-55b0-9ab8-82e35a6686bd)
ProductActix Http (5e4790f4-10b5-5662-ab1e-b8ede176caa0)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/actix/actix-web purl2cpe 2026-06-01 10:14:23.191808
pkg:rpm/fedora/rust-actix-http purl2cpe 2026-06-01 10:14:23.191809
pkg:rpm/opensuse/rust-actix-http purl2cpe 2026-06-01 10:14:23.191811

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38512 vulnerable 2026-06-03 14:45:07.279088 Details available
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.
Published: 2021-08-10T22:12:31.000Z
Updated: 2024-08-04T01:44:22.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.