GHSA-gcqf-3g44-vc9p
NoneCVSS
—
EPSS
—
Published
Feb 6, 2026
CISA due date
—
The record
[actix-files] Panic triggered by empty Range header in GET request for static file
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | actix-files | 0 | 0.6.10 |
| Chainguard | qdrant | 0 | 1.16.3-r6 |
| Wolfi | qdrant | 0 | 1.16.3-r6 |
Related vulnerabilities
- GHSA-8v2v-wjwg-vx6r actix-files has a possible exposure of information vulnerability Also affects actix-files
- CVE-2026-33056 tar-rs is a tar archive reading/writing library for Rust. Also affects qdrant
- CVE-2026-33055 tar-rs is a tar archive reading/writing library for Rust. Also affects qdrant
- CVE-2026-32829 lz4_flex is a pure Rust implementation of LZ4 compression/decompression. Also affects qdrant
- CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Also affects qdrant
- CVE-2026-25727 time provides date and time handling in Rust. Also affects qdrant
- CVE-2026-25541 Bytes is a utility library for working with bytes. Also affects qdrant
- CVE-2026-25537 jsonwebtoken is a JWT lib in rust. Also affects qdrant