From b10d085c36b91c405dcf55383e01415eba46f778 Mon Sep 17 00:00:00 2001 From: Alexis Mousset Date: Mon, 29 Mar 2021 11:54:02 +0000 Subject: [PATCH] RUSTSEC-2021-0020 is fixed in hyper 0.12.36 too See https://github.com/hyperium/hyper/blob/0.12.x/CHANGELOG.md#v01236-2021-02-17 Fix was backported to 0.12.x in https://github.com/hyperium/hyper/pull/2436 and released in 0.12.36. --- crates/hyper/RUSTSEC-2021-0020.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/hyper/RUSTSEC-2021-0020.md b/crates/hyper/RUSTSEC-2021-0020.md index 39ec2a5..bf868e6 100644 --- a/crates/hyper/RUSTSEC-2021-0020.md +++ b/crates/hyper/RUSTSEC-2021-0020.md @@ -9,7 +9,7 @@ keywords = ["http", "request-smuggling"] aliases = ["CVE-2021-21299"] [versions] -patched = [">= 0.14.3", "0.13.10"] +patched = [">= 0.14.3", "0.13.10", "0.12.36"] unaffected = ["< 0.12.0"] ```