CVE-2017-18587: Hyper

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.

Affected products

• Hyper Hyper: before 0.9.18 (fixed in 0.9.18); from 0.10.0, before 0.10.2 (fixed in 0.10.2)

Published 2019-08-26. Last modified 2026-06-17.