GitHub Advisoryadvisory · crates.io

GHSA-w65j-g6c7-g3m4 Multiple memory safety issues in actix-web

MEDIUM Published 2021-08-25 Modified 2026-06-09 Official page ↗
Ecosystem
crates.io
Packages
actix-web
Severity
Moderate
Weaknesses
CWE-362
Reviewed
2021-08-24

Affected packages

• crates.io actix-web: < 0.7.19 → fixed in 0.7.19

Description

Affected versions contain multiple memory safety issues, such as: • Unsoundly coercing immutable references to mutable references • Unsoundly extending lifetimes of strings • Adding the `Send` marker trait to objects that cannot be safely sent between threads This may result in a variety of memory corruption scenarios, most likely use-after-free. A signficant refactoring effort has been conducted to resolve these issues.

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References