https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T13:09:36.235698+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-30429 cnvd-2021-30429 2026-10-14T13:09:36.239319+00:00 cnvd-2021-30429 https://cve.radiocsirt.org/vuln/euvd-2026-47869 EUVD-2026-47869 2026-10-14T13:09:36.239386+00:00 EUVD-2026-47869 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35884 fkie_cve-2020-35884 2026-10-14T13:09:36.239400+00:00

An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.

 https://cve.radiocsirt.org/vuln/ghsa-7v2r-wxmg-mgvc GHSA-7v2r-wxmg-mgvc — HTTP Request smuggling in tiny_http 2026-10-14T13:09:36.239426+00:00

Affected: crates.io: tiny_http

HTTP pipelining issues and request smuggling attacks are possible due to incorrect Transfer encoding header parsing. It is possible conduct HTTP request smuggling attacks (CL:TE/TE:TE) by sending invalid Transfer Encoding headers. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.

 https://cve.radiocsirt.org/vuln/gsd-2020-35884 gsd-2020-35884 2026-10-14T13:09:36.239449+00:00 gsd-2020-35884 https://cve.radiocsirt.org/vuln/rustsec-2020-0031 RUSTSEC-2020-0031 — HTTP Request smuggling through malformed Transfer Encoding headers 2026-10-14T13:09:36.239461+00:00

Affected: crates.io: tiny_http

HTTP pipelining issues and request smuggling attacks are possible due to incorrect Transfer encoding header parsing.

It is possible conduct HTTP request smuggling attacks (CL:TE/TE:TE) by sending invalid Transfer Encoding headers.

By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.