https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T22:50:02.131236+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-73051 fkie_cve-2026-73051 2026-10-02T22:50:02.133202+00:00

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.

 https://vulnerability.circl.lu/vuln/ghsa-rh8q-rpf9-79v6 GHSA-rh8q-rpf9-79v6 2026-10-02T22:50:02.133293+00:00

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-73051 UBUNTU-CVE-2026-73051 2026-10-02T22:50:02.133320+00:00

Affected: Ubuntu:26.04:LTS: rust-actix-http

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.