From f8b4364f884f0cc658a5285b0da9d6c386a57094 Mon Sep 17 00:00:00 2001 From: Jacob Rothstein Date: Thu, 17 Dec 2020 17:54:01 -0800 Subject: [PATCH] maybe appease linter? --- crates/async-h1/RUSTSEC-0000-0000.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/crates/async-h1/RUSTSEC-0000-0000.md b/crates/async-h1/RUSTSEC-0000-0000.md index ca316b3..60ba067 100644 --- a/crates/async-h1/RUSTSEC-0000-0000.md +++ b/crates/async-h1/RUSTSEC-0000-0000.md @@ -3,9 +3,9 @@ id = "RUSTSEC-0000-0000" package = "async-h1" date = "2020-12-17" -url = "https://github.com/http-rs/async-h1" -categories = ["request-smuggling"] -keywords = ["request", "smuggling"] +url = "https://github.com/http-rs/async-h1/releases/tag/v2.3.0" +categories = [] +keywords = ["smuggling", "http", "reverse proxy", "request smuggling"] aliases = ["GHSA-4vr9-8cjf-vf9c"] #cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" @@ -16,10 +16,7 @@ unaffected = [] [affected] #arch = ["x86"] #os = ["windows"] -functions = { - "async_h1::server::decode" = ["< 2.3.0"], - "async_h1::server::accept" = ["< 2.3.0"] -} +functions = {"async_h1::server::decode" = ["< 2.3.0"], "async_h1::server::accept" = ["< 2.3.0"]} ``` # Async-h1 request smuggling possible with long unread bodies