Loading HuntDB...

GHSA-6rhx-hqxm-8p36

GitHub Security Advisory

Double free in http

✓ GitHub Reviewed CRITICAL Has CVE

Advisory Details

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

Affected Packages

crates.io http
Affected versions: 0 (fixed in 0.1.20)

Related CVEs

Key Information

GHSA ID
GHSA-6rhx-hqxm-8p36
Published
August 25, 2021 8:46 PM
Last Modified
August 19, 2021 9:19 PM
CVSS Score
9.0 /10
Primary Ecosystem
crates.io
Primary Package
http
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 1, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.