GHSA-f67m-9j94-qv9j

Dashboard / Vulnerabilities / GHSA-f67m-9j94-qv9j

GHSA-f67m-9j94-qv9j

Summary: Parser creates invalid uninitialized value

Details: Affected versions of this crate called `mem::uninitialized()` in the HTTP1 parser to create values of type `httparse::Header` (from the `httparse` crate). This is unsound, since `Header` contains references and thus must be non-null. The flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.

References: https://github.com/hyperium/hyper/pull/2545, https://github.com/hyperium/hyper, https://rustsec.org/advisories/RUSTSEC-2022-0022.html