trillium-http
Trillium is a composable toolkit for building internet applications with async rust
View on Github
Activity
- Latest release
- 5d ago
- Total releases
- 75
- Cadence
- ~4 days
- Last 12 months
- 32
Reach
- Downloads
- 274.3k
- Stars
- 374
Details
- License
- MIT OR Apache-2.0
- First release
- Apr 25, 2021
| Version | Released | |
|---|---|---|
1.7.2
patch
|
1.7.2
patch
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.7.1
patch
|
1.7.1
patch
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.7.0
minor
|
1.7.0
minor
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.6.4
patch
|
1.6.4
patch
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.6.3
patch
|
1.6.3
patch
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.6.2
patch
|
1.6.2
patch
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.6.1
patch
|
1.6.1
patch
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.6.0
unknown
|
1.6.0
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.5.2
unknown
|
1.5.2
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.5.1
unknown
|
1.5.1
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.5.0
unknown
|
1.5.0
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.4.2
unknown
|
1.4.2
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.4.1
unknown
|
1.4.1
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.4.0
unknown
|
1.4.0
unknown
Dependencies (41)
+ 33 more
Changelog
Compare changes
|
|
1.3.10
unknown
|
1.3.10
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.9
unknown
|
1.3.9
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.8
unknown
|
1.3.8
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.3.7
unknown
|
1.3.7
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.3.6
unknown
|
1.3.6
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.3.5
unknown
|
1.3.5
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.3.4
unknown
|
1.3.4
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.3
unknown
|
1.3.3
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.2
unknown
|
1.3.2
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.1
unknown
|
1.3.1
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.3.0
unknown
|
1.3.0
unknown
Dependencies (40)
+ 32 more
Changelog
Compare changes
|
|
1.2.2
unknown
|
1.2.2
unknown
Dependencies (36)
+ 28 more
Changelog
Compare changes
|
|
1.2.1
unknown
|
1.2.1
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.2.0
unknown
|
1.2.0
unknown
Dependencies (39)
+ 31 more
Changelog
Compare changes
|
|
1.1.0
unknown
|
1.1.0
unknown
Dependencies (36)
+ 28 more
Changelog
Compare changes
|
|
1.0.1
unknown
|
1.0.1
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
1.0.0
unknown
yanked
|
1.0.0
unknown
yanked
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
1.0.0-rc.1
unknown
|
1.0.0-rc.1
unknown
Dependencies (35)
+ 27 more
Changelog
Compare changes
|
|
0.3.17
unknown
|
0.3.17
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.16
unknown
|
0.3.16
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.15
unknown
|
0.3.15
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.14
unknown
|
0.3.14
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.13
unknown
|
0.3.13
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.12
unknown
|
0.3.12
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.11
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.11
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.10
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.10
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.9
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.9
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.8
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.8
unknown
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.3.7
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.7
unknown
Dependencies (26)
+ 18 more
Changelog
Compare changes
|
|
0.3.6
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.6
unknown
Dependencies (26)
+ 18 more
Changelog
Compare changes
|
|
0.3.5
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.5
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.3.4
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.4
unknown
Dependencies (24)
+ 16 more
Changelog
Compare changes
|
|
0.3.3
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.3
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.2
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.2
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.1
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.1
unknown
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.0
unknown
1 CVE
CVE-2024-23644
GHSA-9f9p-cp3c-72jf
RUSTSEC-2024-0008
RUSTSEC-2024-0009
Jan 24, 2024
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
6.8
/ 10
Medium
Network
High
Low
None
Unchanged
High
High
None
SummaryInsufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have sufficient control over outbound headers. DetailsOutbound Patchestrillium-http >= 0.3.12:
trillium-client >= 0.5.4:
Workaroundstrillium services and client applications should sanitize or validate untrusted input that is included in header values and header names. Carriage return, newline, and null characters are not allowed. ImpactThis only affects use cases where attackers have control of outbound headers, and can insert "\r\n" sequences. Specifically, if untrusted and unvalidated input is inserted into header names or values. A note on timing from @jbr on behalf of
|
0.3.0
unknown
Dependencies (21)
+ 13 more
Changelog
Compare changes
|