VULNERABILITY INTELLIGENCE

CVE-2021-38512

CVSS score7.5 HIGH

EPSS probability1.81%

CISA KEVNot currently listed

Published2021-08-10

Last modified2026-06-17

Description

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.