hyper (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package hyper, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2020-35863 — CVSS 9.8 (critical): An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in…
• CVE-2021-32714 — CVSS 5.9 (medium): hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an…
• CVE-2017-18587 — CVSS 5.3 (medium): An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.
• CVE-2016-10932 — CVSS 4.8 (medium): An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because…
• CVE-2021-21299 — CVSS 4.8 (medium): hyper is an open-source HTTP library for Rust (crates.io). In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a…
• CVE-2021-32715 — CVSS 3.1 (low): hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a…