[Apiiro] SCA OSS Vulnerabilities - Critical CVSS score · Critical Risk

[urikalma]

Discovered on: Mar 13, 2024 10:01
Dependency: hyper
Version: 0.12.35
Type: Sub dependency

Vulnerabilities

• Hyperium Hyper HTTP2 Attack Vulnerability with CVSS score 7.5. fixed version: 0.14.19
• Integer Overflow in Chunked Transfer-Encoding with CVSS score 9.1. fixed version: 0.14.10
• Lenient Parsing of Content-Length Header When Prefixed with Plus Sign with CVSS score 5.3. fixed version: 0.14.10
• HTTP Request Smuggling in hyper with CVSS score 8.1. fixed version: 0.12.36
• Parser creates invalid uninitialized value with CVSS score . fixed version: 0.14.12

About this package:

External dependency: hyper - https://hyper.rs
Package details: A fast and correct HTTP library.
Latest version: 1.2.0
License: MIT
Insights:

• Frequent commits - New code commits are frequently being pushed
• Popularity - This package has many weekly downloads and high popularity scores
• Has vulnerabilities - One or more vulnerabilities have been reported for this package

Remediation

Recommended fix version: 0.14.19
Upgrading will fix all current vulnerabilities.
✅ No known vulnerabilities for the recommended version.

View in Apiiro