Actix vulnerabilities

Products

• Actix-http 3
• Actix-web 3
• Actix-files 2

Newest

• actix actix-http actix-http before 3.12.1 HTTP Request Smuggling via CL.TE CVE-2026-73051 Fix available 6.3 MediumApril 22, 2026
• actix actix-files actix-files before 0.6.10 Denial of Service via empty Range header CVE-2026-72813 Fix available 6.9 MediumFebruary 6, 2026
• actix actix-files actix-files before 0.6.10 Information Disclosure via Files CVE-2026-72814 Fix available 6.3 MediumFebruary 6, 2026
• actix actix-http, fedoraproject fedora +1 more HTTP Request Smuggling in actix-http CVE-2021-38512 Fix available 7.5 HighJune 16, 2021
• actix actix-codec Use-after-free in actix-codec CVE-2020-35902 Fix available 9.8 CriticalJanuary 30, 2020
• actix actix-http Use-after-free in actix-http CVE-2020-35901 Fix available 7.5 HighJanuary 24, 2020
• actix actix-service Use after free in actix-service CVE-2020-35899 Fix available 5.5 MediumJanuary 8, 2020
• actix actix-utils Use after free in actix-utils CVE-2020-35898 Fix available 9.1 CriticalJanuary 8, 2020
• actix actix-web Out-of-bounds Write in actix-web CVE-2018-25026 Fix available 9.8 CriticalJune 8, 2018
• actix actix-web Out-of-bounds Write in actix-web CVE-2018-25025 Fix available 9.8 CriticalJune 8, 2018
• actix actix-web Out-of-bounds Write in actix-web CVE-2018-25024 Fix available 9.8 CriticalJune 8, 2018