CVE-2018-25024: Actix Actix-Web

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption.

Affected products

• Actix Actix-Web: before 0.7.15 (fixed in 0.7.15)

Published 2021-12-27. Last modified 2026-06-17.