[Apiiro] SCA OSS Vulnerabilities - Critical CVSS score · Critical Risk

[apiiro-staging]

mmmm

Discovered on: Jul 03, 2023 13:08
Dependency: hyper
Version: 0.9.18
Type: Sub dependency

Vulnerabilities

• CVE-2020-35863 with CVSS score 9.8. fixed version: 0.12.34
• CVE-2022-31394 with CVSS score 7.5. fixed version: 0.14.19
• Integer Overflow in Chunked Transfer-Encoding with CVSS score 9.1. fixed version: 0.14.10
• Lenient Parsing of Content-Length Header When Prefixed with Plus Sign with CVSS score 5.3. fixed version: 0.14.10
• Parser creates invalid uninitialized value with CVSS score . fixed version: 0.14.12
• Lenient Parsing of Content-Length Header When Prefixed with Plus Sign with CVSS score 3.1. fixed version: 0.14.10

About this package:

External dependency: hyper - https://hyper.rs
Package details: A fast and correct HTTP library.
Latest version: 0.14.27
License: MIT
Insights:

• Frequent commits - New code commits are frequently being pushed
• No version 1 - The package releases hasn't reached v1
• Popularity - This widely used package is popular

Remediation

Recommended fix version: 0.14.19
Upgrading will fix all current vulnerabilities.
✅ No known vulnerabilities for the recommended version.

View in Apiiro