`tower-http`

Ecosystem:
cargo

Package URL:
pkg:cargo/tower-http

Total PRs:
1,581 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
678 repositories

Unique Repos (30 days):
17 repositories

Security Advisories

tower-http's improper validation of Windows paths could lead to directory traversal attack

GHSA-qrqq-9c63-xfrg HIGH published almost 4 years ago • updated 5 days ago

`tower_http::services::fs::ServeDir` didn't correctly validate Windows paths, meaning paths like `/foo/bar/c:/windows/web/screen/img101.png` would ...

tower-http's improper validation of Windows paths could lead to directory traversal attack

GHSA-wwh2-r387-g5rm MODERATE published about 4 years ago • updated 8 days ago

`tower_http::services::fs::ServeDir` didn't correctly validate Windows paths meaning paths like `/foo/bar/c:/windows/web/screen/img101.png` would b...

Recent PRs

RSS Feed

build(deps): bump the rust group across 1 directory with 33 updates

maxkle1nz/m1nd #392

0.6.8 → 0.7.0 Minor PR

Closed 4 days ago 5 comments

Bump the rust-dependencies group across 1 directory with 12 updates

AndPuQing/PyTail #13

0.6.10 → 0.7.0 Minor PR

Closed 8 days ago 1 comment

Bump the rust-runtime group in /daemon with 11 updates

Pugbread/ro-sync #6

0.6.8 → 0.7.0 Minor PR

Open 10 days ago 1 comment

build(deps): Update tower-http requirement from 0.6 to 0.7

2mes4/conductor #4

0.6 → 0.7

Open 12 days ago 1 comment

chore(deps): bump the cargo-production-dependencies group across 1 directory with 62 updates

Pa123313/opentelemetry-demo #229

0.6.8 → 0.6.11 Patch PR

Closed 13 days ago 1 comment

chore(deps): bump the rust-dependencies group across 1 directory with 70 updates

josedab/transcode #52

0.6.8 → 0.7.0 Minor PR

Open 13 days ago 2 comments

chore(deps): bump tower-http from 0.6.11 to 0.7.0 in /backend/server

yujiangxian/nuwa #3

0.6.11 → 0.7.0 Minor PR

Open 17 days ago 1 comment

chore(deps): bump the cargo-production-dependencies group across 1 directory with 52 updates

coralogix-se/opentelemetry-demo #201

0.6.8 → 0.6.11 Patch PR

Closed 20 days ago 1 comment

build(deps): bump the rust-dependencies group across 1 directory with 20 updates

randomparity/voom #435

0.6.10 → 0.7.0 Minor PR

Closed 21 days ago 1 comment

build(deps): bump tower-http from 0.6.11 to 0.7.0

RawSocketLabs/rsl #17

0.6.11 → 0.7.0 Minor PR

Closed 22 days ago 2 comments

chore(deps): bump the cargo-deps group across 1 directory with 41 updates

SHLE1/cc-switch-lite #14

0.5.2 → 0.6.8 Minor PR

Open 23 days ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 42 updates

qinghua362330/cc-switch-company #7

0.5.2 → 0.6.8 Minor PR

Closed 26 days ago 2 comments

chore(deps): bump the cargo-weekly group across 1 directory with 14 updates

Dargon789/foundry #605

0.6.11 → 0.7.0 Minor PR

Open 28 days ago 4 comments

build(deps): bump the dependencies group across 1 directory with 20 updates

socketz/rustfs #6

0.6.11 → 0.7.0 Minor PR

Open 28 days ago 3 comments

chore(deps): bump tower-http from 0.6.11 to 0.7.0 in /server in the cargo group

NetBr3ak/AstrOS #2

0.6.11 → 0.7.0 Minor PR

Open 30 days ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 42 updates

sunfengsheng/cc-switch_suirenai #8

0.5.2 → 0.6.8 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the cargo group with 20 updates

everruns/everruns #2475

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 2 comments

Bump the all-dependencies group with 17 updates

Alyssadaypin/ckb--016 #4

0.6.8 → 0.6.11 Patch PR

Closed about 1 month ago 1 comment

chore(deps)(deps): bump tower-http from 0.6.11 to 0.7.0 in the axum-stack group

wienerlabs/wienerenvoy #16

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 3 comments

build(deps): bump the cargo-all group across 1 directory with 12 updates

andreb154/cairn #5

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

Update tower-http requirement from 0.6.8 to 0.7.0 in /apps/expense_tracker

Ciel1996/expense-tracker-backend #100

0.6.8 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

runtime-sdk: bump the rust group across 4 directories with 51 updates

Yakhil-cmd/oasis-sdk-003 #47

0.6.8 → 0.7.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the cargo-production-dependencies group across 1 directory with 48 updates

Vacbo/northstar-commerce #188

0.6.8 → 0.6.11 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the rust-dependencies group across 1 directory with 13 updates

Kehl-io/nestweaver #69

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

runtime-sdk: bump the rust group across 4 directories with 50 updates

Yakhil-cmd/oasis-sdk-010 #44

0.6.8 → 0.7.0 Minor PR

Open about 1 month ago 1 comment

build(deps): Bump tower-http from 0.6.11 to 0.7.0

asymmetry/memoryhub #30

0.6.11 → 0.7.0 Minor PR

Open about 1 month ago 1 comment

Bump the rust-dependencies group across 1 directory with 29 updates

cache-has/armillary #20

0.6.8 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

Bump the rust-deps group across 1 directory with 13 updates

Edwinexd/minerva #76

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

deps: bump the rust-dependencies group across 1 directory with 6 updates

vouch-sh/vouch #488

0.6.11 → 0.7.0 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump the cargo-minor-patch group across 1 directory with 9 updates

mountain-reverie/ghostframe #18

0.6.8 → 0.6.11 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the rust-runtime-dependencies group across 1 directory with 19 updates

dallay/corvus #841

0.6.9 → 0.6.11 Patch PR

Open about 1 month ago 4 comments

build(deps): bump the rust-deps group across 1 directory with 20 updates

dbward-dev/dbward #140

0.6.8 → 0.7.0 Minor PR

Closed about 2 months ago 1 comment

Bump the rust-dependencies group across 1 directory with 15 updates

ADHIL007/codemem-server-v2 #3

0.6.10 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the rust-all group with 27 updates

hongyuatcufe/smart-crawler-zeroclaw #33

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 4 comments

build(deps): bump the rust-all group with 24 updates

topherchris420/james_library #340

0.6.8 → 0.6.11 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the rust-all group with 28 updates

izm1chael/zeroclaw #29

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 3 comments

build(deps): bump the rust group across 1 directory with 46 updates

hyperb1iss/hypercolor #97

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the rust-all group across 1 directory with 26 updates

hongyuatcufe/smart-crawler-zeroclaw #32

0.6.8 → 0.6.11 Patch PR

Open about 2 months ago 3 comments

build(deps): bump the rust-all group across 1 directory with 23 updates

topherchris420/james_library #339

0.6.8 → 0.6.11 Patch PR

Open about 2 months ago 2 comments

chore(deps): Bump the cargo-patch group across 1 directory with 16 updates

Lowband21/ferrex #44

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo-dependencies group with 18 updates

tgies/uls #28

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 2 comments

Bump the all group across 1 directory with 13 updates

fat-fred/govee2mqtt-2fa #13

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

Bump the all group across 1 directory with 78 updates

kazimkayhan/mudir #26

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo-deps group across 1 directory with 39 updates

cp-yu/cc-switch-web #13

0.5.2 → 0.6.8 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump the rust-runtime-dependencies group across 1 directory with 15 updates

dallay/corvus #835

0.6.9 → 0.6.11 Patch PR

Closed about 2 months ago 3 comments

build(deps): bump the rust-all group across 1 directory with 21 updates

topherchris420/james_library #337

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the rust-dependencies group across 1 directory with 34 updates

Mootikins/crucible #98

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the rust-all group across 1 directory with 17 updates

jasonyux/zeroclaw #18

0.6.8 → 0.6.11 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the rust-dependencies group with 13 updates

TKPND/side-public #6

0.6.8 → 0.6.11 Patch PR

Open about 2 months ago 2 comments

build(deps): bump the rust-all group across 1 directory with 21 updates

topherchris420/james_library #334

0.6.8 → 0.6.11 Patch PR

Closed about 2 months ago 3 comments

Package Details

Name:	`tower-http`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/tower-http`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All cargo Advisories

Package Information

Description:

Tower middleware and utilities for HTTP clients and servers

Repository:	https://github.com/tower-rs/tower-http
Homepage:	https://github.com/tower-rs/tower-http
Latest Release:	`0.6.6` about 1 year ago
Dependent Repos:	4,231
Dependent Packages:	443
Downloads:	88,058,417
Ranking:	Top 0.5607% by dependent repos Top 0.3237% by downloads Top 0.2511% by dependent pkgs

PR Status

Open 625 (39.5%)

Merged 244 (15.4%)

Closed 532 (33.6%)

PR Types

Minor 221 (14.0%)

Patch 1,141 (72.2%)