https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:09:57.570772+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352430 EUVD-2026-352430 2026-10-03T17:09:57.656608+00:00 EUVD-2026-352430 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73051 fkie_cve-2026-73051 2026-10-03T17:09:57.656683+00:00

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.

 https://cve.radiocsirt.org/vuln/ghsa-rh8q-rpf9-79v6 GHSA-rh8q-rpf9-79v6 2026-10-03T17:09:57.656752+00:00

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73051 UBUNTU-CVE-2026-73051 2026-10-03T17:09:57.656784+00:00

Affected: Ubuntu:26.04:LTS: rust-actix-http

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.