RUSTSEC-2026-0181
NoneCVSS
—
EPSS
—
Published
Jun 6, 2026
CISA due date
—
The record
DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | vibeio-http | 0.0.0-0 | 0.3.2 |