Actix vulnerabilities
We track 1 vulnerability in Actix products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Actix vulnerabilities
- 7.5 High severity
actix-http: Improper Handling of Highly Compressed Data (Data Amplification)
actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encoding::Decoder that lets remote attackers exhaust memory and CPU via compressed bodies. Attackers can send small highly compressed gzip, deflate, Brotli