Most recent entries from all

cnvd-2022-01146

EUVD-2026-70916

fkie_cve-2018-25024

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption.

GHSA-9qj6-4rfq-vm84 — Out-of-bounds Write in actix-web

Affected: crates.io: actix-web

An issue was discovered in the actix-web crate before 0.7.19 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption.

gsd-2018-25024

RUSTSEC-2018-0019 — Multiple memory safety issues

Affected: crates.io: actix-web

Affected versions contain multiple memory safety issues, such as:

- Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the `Send` marker trait to objects that cannot be safely sent between threads

This may result in a variety of memory corruption scenarios, most likely use-after-free. A significant refactoring effort has been conducted to resolve these issues.

UBUNTU-CVE-2018-25024

Affected: Ubuntu:20.04:LTS: rust-actix-derive, Ubuntu:22.04:LTS: rust-actix-derive, Ubuntu:24.04:LTS: rust-actix-derive, Ubuntu:25.10: rust-actix-derive, Ubuntu:26.04:LTS: rust-actix-derive

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption.