https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:50:23.431905+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-73051 CVE-2026-73051 — actix-http before 3.12.1 HTTP Request Smuggling via CL.TE 2026-10-07T07:50:23.448582+00:00

Affected: actix-web

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.