CVE-2020-35863: Hyper

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.

Affected products

• Hyper Hyper: before 0.12.34 (fixed in 0.12.34)

Published 2020-12-31. Last modified 2026-06-17.