VYPR

async-h1

by async-h1

CVEs (2)

  • CVE-2020-36202Jan 22, 2021
    risk 0.00cvss epss 0.00

    An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.

  • CVE-2020-26281Dec 21, 2020
    risk 0.00cvss epss 0.00

    async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applications. If the server…