Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hyperium/http
master @ bb8705b
10
Fixes
2
CVEs
CRITICAL
Peak severity
100.0%
Coverage
Highlights
Denial of Service: 7 prior fixes. Scrutinize any change in this area.
src/header/map.rs: most-fixed (5 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: The `HeaderMap` structure has repeatedly experienced panic-induced crashes due to integer overflows during capacity calculations and reserve operations, as well as logic errors during entry removal. Attacks leveraging large size hints or large collection extensions can trigger service-wide denial of service.
Request Smuggling: Ineffective validation of brackets in URI authority structures can cause parsing discrepancies when the URI parser is used alongside downstream servers. These inconsistencies present a risk of request smuggling or server-side request forgery (SSRF).
Memory Safety: Unsafe casts from byte sequences to `ByteStr` without prior UTF-8 validation can introduce undefined behavior into the runtime if the path contains non-UTF-8 characters.