Http (Hyper) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2020-12-31. Vendor: Hyper.

CVEs of Http

• CVE-2019-25009 - CVSS 9.8 (critical), 2020-12-31: An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
• CVE-2020-25574 - CVSS 7.5 (high), 2020-09-14: An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g., an…