← All advisories

High severity7.5NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-35901

CVE-2020-35901

Description

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
actix-httpcrates.io	< 2.0.0	2.0.0

Affected products

3

Rust/actix-httpdescription
Actix/Actix HTTP
cpe:2.3:a:actix:actix-http:*:*:*:*:*:rust:*:*
Range: <=1.0.1
ghsa-coords
pkg:cargo/actix-http
Range: < 2.0.0

Patches

Vulnerability mechanics

References

4

rustsec.org/advisories/RUSTSEC-2020-0048.htmlnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-v3j6-xf77-8r9cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-35901ghsaADVISORY
github.com/actix/actix-web/issues/1321ghsaWEB

News mentions

0

No linked articles in our index yet.