Starstruk Logo MarkStarstruk

http-v3.12.1

rohitg00/agentmemoryhttp-v3.12.1Apr 18, 2026by JohnTitor

AI Summary

This release focuses on security improvements and dependency updates for the HTTP handling layer, specifically addressing request smuggling vulnerabilities.

Key Highlights

  • Security fix that rejects HTTP/1 requests with ambiguous framing to prevent request smuggling.
  • Encodes HTTP/1 'Connection: Upgrade' header in Camel-Case when header formatting is enabled.
  • Updates `rand` dependency to version 0.10 and `sha1` dependency to version 0.11.
  • Fixes iterator bugs in `HeaderMap` regarding `len()` and `size_hint()` implementations.

Full Release Notes

**Notice: This release contains a security fix. Users are encouraged to update to this version ASAP.**

- SECURITY: Reject HTTP/1 requests with ambiguous request framing from `Content-Length` and `Transfer-Encoding` headers to prevent request smuggling.
- Encode the HTTP/1 `Connection: Upgrade` header in Camel-Case when camel-case header formatting is enabled.[#3953]
- Fix `HeaderMap` iterators' `len()` and `size_hint()` implementations for multi-value headers.
- Update `rand` dependency to `0.10`.
- Update `sha1` dependency to `0.11`.

[#3953]: https://github.com/actix/actix-web/pull/3953