`http`

Ecosystem:
cargo

Package URL:
pkg:cargo/http

Total PRs:
371 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
203 repositories

Unique Repos (30 days):
35 repositories

Security Advisories

Double free in http

GHSA-6rhx-hqxm-8p36 CVE-2019-25009 CRITICAL published almost 5 years ago • updated 15 days ago

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

Integer Overflow/Infinite Loop in the http crate

GHSA-x7vr-c387-8w57 CVE-2020-25574 HIGH published almost 5 years ago • updated 22 days ago

HeaderMap::reserve() used usize::next_power_of_two() to calculate the increased capacity. However, next_power_of_two() silently overflows to 0 if g...

Recent PRs (filtered by: Merged , Patch PRs )

RSS Feed Clear filter

No PRs Found

No Dependabot PRs found for this package.

Package Details

Name:	`http`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/http`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All cargo Advisories

Package Information

Description:

A set of types for representing HTTP requests and responses.

Repository:	https://github.com/hyperium/http
Latest Release:	`1.3.0` over 1 year ago
Dependent Repos:	42,695
Dependent Packages:	3,729
Downloads:	269,593,724
Ranking:	Top 0.0811% by dependent repos Top 0.0691% by downloads Top 0.0261% by dependent pkgs

PR Status

Open 143 (38.5%)

Merged 6 (1.6%)

Closed 197 (53.1%)

PR Types

Major 66 (17.8%)

Minor 234 (63.1%)

Patch 41 (11.1%)