These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-73051 is an HTTP request smuggling vulnerability in actix-http versions before 3.12.1. The vulnerability occurs in the HTTP/1.1 parser and allows requests with both Content-Length and Transfer-Encoding: chunked headers. This issue can be exploited by unauthenticated remote attackers through a front-end intermediary to desynchronize backend requests and smuggle malicious HTTP requests to the Actix service.
CVE-2026-72814 is an information exposure vulnerability in the actix-files crate before version 0.6.10. When a non-existing folder is passed as the serve_from argument to Files::new(), the mount path defaults to an empty path; the service then joins the request path with this empty path and canonicalizes it, causing Rust to resolve it as a relative path. As a result, an attacker can request paths that res [truncated]
CVE-2026-72813 is a denial of service vulnerability in actix-files before version 0.6.10. The vulnerability is triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header. This issue can have significant operational impacts, including denial of service via process crash [truncated]