Rust advisories / crate
Security history · tower-http · data from Oct 24, 2026
Is tower-http safe to use? Its security history
VerdictNo open advisories. 3 past vulnerabilities were fixed; use 0.2.1 or newer to be clear of all of them.
3advisories on record
3vulnerabilities
0unmaintained notices
0.2.1newest fixed version
Every advisory, newest first
- VulnerabilityGHSA-wwh2-r387-g5rm · 2022-06-17tower-http's improper validation of Windows paths could lead to directory traversal attack
- VulnerabilityGHSA-wwh2-r387-g5rm · 2022-06-17tower-http's improper validation of Windows paths could lead to directory traversal attack
- VulnerabilityRUSTSEC-2022-0043 · 2022-01-21Improper validation of Windows paths could lead to directory traversal attack
Check your version
Run cargo tree -i tower-http to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: tower-http crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on ittower-http crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?