github.com/apple/swift-nio vulnerabilities (SwiftURL)

5 vulnerabilities.

• github.com/apple/swift-nio SwiftURL SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS CVE-2026-28980 Fix available 8.7 HighJune 12, 2026
• github.com/apple/swift-nio SwiftURL SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow CVE-2026-43671 Fix available 8.3 HighJune 12, 2026
• github.com/apple/swift-nio SwiftURL SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator CVE-2026-28970 Fix available 6.3 MediumJune 12, 2026
• github.com/apple/swift-nio SwiftURL SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header GHSA-mgc4-wqv7-4pxm Fix available 9.8 CriticalMay 18, 2023
• github.com/apple/swift-nio SwiftURL SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-3215 Fix available 7.5 HighSeptember 28, 2022