How many CVEs does actix have?

actix has 11 published CVE records since 2020, including 3 in the last two years.

How many actix CVEs are in CISA KEV?

None of actix's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which actix products have the most CVEs?

The actix products with the most published CVEs are actix-web, actix-net, actix-http, actix-codec, actix-service.

What are the most common weakness types in actix CVEs?

actix's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for actix vulnerabilities?

Yes — 7 of actix's CVEs have a known public exploit.

How many critical actix vulnerabilities are there?

actix has 5 critical and 2 high-severity CVEs.

What is the average severity of actix CVEs?

The average CVSS base score across actix's scored CVEs is 8.0.

actix Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: actix vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

actix has 11 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

Security scorecard

A quick read on actix's vulnerability posture, as a share of its 11 published CVEs.

Average CVSS: 8.0
Critical / high: 64%
Actively exploited (KEV): 0%
Public exploit available: 64%
Patch available: 100%

Severity and exploitation

How the CVSS severity of actix's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of actix's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7 of actix's CVEs have a known public exploit available.

Most affected products

The actix products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in actix CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish actix CVE records.

Disclosure activity by year

How many actix CVEs were published each year.

2020

2021

2026

Latest actix CVEs

The most recently disclosed vulnerabilities affecting actix.

actix-http before 3.12.1 HTTP Request Smuggling via CL.TE
CWE-444
Medium · CVSS 6.3
EPSS 0.6%2026-08-14
actix-web before 0.6.10 Information Disclosure via Files
CWE-22
Medium · CVSS 6.3
EPSS 0.5%2026-08-14
actix-files before 0.6.10 Denial of Service via empty Range header
CWE-248
Medium · CVSS 6.9
EPSS 0.5%2026-08-14
Out-of-bounds Write in actix-web

Other vendors

CVE counts for other vendors.

microsoft42,741 CVEs linux25,916 CVEs Google17,856 CVEs Apple15,580 CVEs Oracle14,425 CVEs Debian10,234 CVEs IBM9,501 CVEs Red Hat8,617 CVEs

Browse all vendors

Frequently asked questions

Common questions about actix vulnerabilities.

How many CVEs does actix have?: actix has 11 published CVE records since 2020, including 3 in the last two years.
How many actix CVEs are in CISA KEV?: None of actix's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which actix products have the most CVEs?: The actix products with the most published CVEs are actix-web, actix-net, actix-http, actix-codec, actix-service.
What are the most common weakness types in actix CVEs?: actix's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for actix vulnerabilities?: Yes — 7 of actix's CVEs have a known public exploit.
How many critical actix vulnerabilities are there?: actix has 5 critical and 2 high-severity CVEs.
What is the average severity of actix CVEs?: The average CVSS base score across actix's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track actix vulnerabilities

Get an alert for each new actix CVE, with AI-written analysis and remediation steps.

Create an account See pricing