github.com/vapor/leaf-kit vulnerabilities (SwiftURL)

3 vulnerabilities.

• github.com/vapor/leaf-kit SwiftURL LeafKit's HTML escaping may be skipped for Collection values, enabling XSS CVE-2026-28499 Fix available 6.9 MediumMarch 16, 2026
• github.com/vapor/leaf-kit SwiftURL Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster CVE-2026-27120 Fix available 6.1 MediumFebruary 19, 2026
• github.com/vapor/leaf-kit SwiftURL LeafKit allows XSS with untrusted user input CVE-2021-37634 Fix available 7.4 HighAugust 9, 2021