Product

crates.io tiny_http vulnerabilities

1 published CVE affecting crates.io tiny_http, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest crates.io tiny_http CVEs

Newest publication first

CVE-2020-35884 HTTP Request smuggling in tiny_http
Published 2020-12-31

MediumCVSS 6.5 EPSS 1.1%

An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

crates.io tiny_http vulnerabilities

Latest crates.io tiny_http CVEs

CVE-2020-35884 HTTP Request smuggling in tiny_http