Categories ⋅ Keywords ⋅ Packages Advisories for package 'actix-http' November 6, 2026 RUSTSEC-2026-0446: Vulnerability in actix-http Request smuggling through malformed chunked request trailers November 6, 2026 RUSTSEC-2026-0448: Vulnerability in actix-http Unbounded decompression can exhaust memory and CPU resources November 6, 2026 RUSTSEC-2026-0455: Vulnerability in actix-http Large-window Brotli bodies bypass decompression memory limits August 10, 2021 HIGH RUSTSEC-2021-0081: Vulnerability in actix-http Potential request smuggling capabilities due to lack of input validation October 1, 2020 HIGH RUSTSEC-2020-0048: Vulnerability in actix-http Use-after-free in BodyStream due to lack of pinning