https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:00:30.106842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47880 EUVD-2026-47880 2026-10-03T15:00:30.110477+00:00 EUVD-2026-47880 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35901 fkie_cve-2020-35901 2026-10-03T15:00:30.110528+00:00

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

 https://cve.radiocsirt.org/vuln/ghsa-v3j6-xf77-8r9c GHSA-v3j6-xf77-8r9c — Use-after-free in actix-http 2026-10-03T15:00:30.110562+00:00

Affected: crates.io: actix-http

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

 https://cve.radiocsirt.org/vuln/gsd-2020-35901 gsd-2020-35901 2026-10-03T15:00:30.110587+00:00 gsd-2020-35901 https://cve.radiocsirt.org/vuln/rustsec-2020-0048 RUSTSEC-2020-0048 — Use-after-free in BodyStream due to lack of pinning 2026-10-03T15:00:30.110600+00:00

Affected: crates.io: actix-http

Affected versions of this crate did not require the buffer wrapped in `BodyStream` to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free. The flaw was corrected by making the trait `MessageBody` require `Unpin` and making `poll_next()` function accept `Pin<&mut Self>` instead of `&mut self`.