How many actix actix-http CVEs are in CISA KEV?

None of actix actix-http's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of actix actix-http are affected?

8 distinct actix actix-http versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in actix actix-http CVEs?

actix actix-http's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).

What is the average severity of actix actix-http CVEs?

The average CVSS base score across actix actix-http's scored CVEs is 7.5.

actix actix-http Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: actix actix-http vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

actix actix-http Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

actix actix-http has 2 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

Severity and exploitation

How the CVSS severity of actix actix-http's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of actix actix-http's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of actix actix-http's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every actix actix-http version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.0.01 CVE
< 2.2.11 CVE
< 3.0.01 CVE
<= 1.0.11 CVE
3.0.0 <= v <= 3.0.01 CVE

Fixed in

2.0.01 CVE
2.2.11 CVE
3.0.01 CVE

Find a version

2 CVEs

Sort

HTTP Request Smuggling in actix-http
CVE-2021-38512
Public exploit
Patch
CWE-444
High · CVSS 7.5
EPSS 1.8% (78th pct)2021-08-10
Use-after-free in actix-http
CVE-2020-35901
Public exploit
Patch
CWE-416
High · CVSS 7.5
EPSS 1.4% (73th pct)2020-12-31

Common weakness types

The CWE weakness categories most often found in actix actix-http CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many actix actix-http CVEs were published each year.

2020

2021

Other actix products

Browse vulnerabilities for other products by actix.

actix-web8 CVEs actix-net3 CVEs actix-codec1 CVEs actix-service1 CVEs actix-utils1 CVEs

All actix vulnerabilities

Frequently asked questions

Common questions about actix actix-http vulnerabilities.

How many CVEs does actix actix-http have?: actix actix-http has 2 published CVE records since 2020.
How many actix actix-http CVEs are in CISA KEV?: None of actix actix-http's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for actix actix-http vulnerabilities?: Yes — 2 of actix actix-http's CVEs have a known public exploit.
Which versions of actix actix-http are affected?: 8 distinct actix actix-http versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in actix actix-http CVEs?: actix actix-http's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).
What is the average severity of actix actix-http CVEs?: The average CVSS base score across actix actix-http's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track actix actix-http vulnerabilities

Get an alert for each new actix actix-http CVE, with AI-written analysis and remediation steps.

Create an account See pricing