Rust advisories / crate
Security history · actix-http · data from Oct 24, 2026
Is actix-http safe to use? Its security history
VerdictNo open advisories. 3 past vulnerabilities were fixed; use 3.0.0-beta.9 or newer to be clear of all of them.
3advisories on record
3vulnerabilities
0unmaintained notices
3.0.0-beta.9newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-xhj4-vrgc-hr34 · 2026-04-22actix-http has HTTP/1.1 CL.TE Request Smuggling
- Vulnerability HighRUSTSEC-2021-0081 · 2021-06-16Potential request smuggling capabilities due to lack of input validation
- Vulnerability HighRUSTSEC-2020-0048 · 2020-01-24Use-after-free in BodyStream due to lack of pinning
Check your version
Run cargo tree -i actix-http to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?