Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD6.9 Medium

CVE-2026-72813

actix-files before 0.6.10 Denial of Service via empty Range header

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

actix actix-files

Default version status: unaffected

  • 0 to < 0.6.10affected
  • 0.6.10unaffected
pkg:cargo/actix-files

References