Most recent entries from all

EUVD-2026-47880

fkie_cve-2020-35901

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

GHSA-v3j6-xf77-8r9c — Use-after-free in actix-http

Affected: crates.io: actix-http

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

gsd-2020-35901

RUSTSEC-2020-0048 — Use-after-free in BodyStream due to lack of pinning

Affected: crates.io: actix-http

Affected versions of this crate did not require the buffer wrapped in `BodyStream` to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free. The flaw was corrected by making the trait `MessageBody` require `Unpin` and making `poll_next()` function accept `Pin<&mut Self>` instead of `&mut self`.