Skip to content
Apple Swift-nio vulnerabilities
-
apple swift-nio-ssh, swiftnio ssh +1 more
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulne…
CVE-2026-43798
9.8 Critical
-
apple swift-nio, swiftnio +1 more
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active con…
CVE-2026-43678
5.3 Medium
-
apple swift-nio-http2, swiftnio http\/2 +1 more
swift-nio-http2: Missing CR/LF/NUL validation in header values
CVE-2026-64785
Fix available
5.3 Medium
-
apple swift-nio-ssl, swiftnio ssl +1 more
NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by…
CVE-2026-43820
7.7 High
-
apple swift-nio-http2, swiftnio http\/2 +1 more
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
CVE-2026-28898
Fix available
5.3 Medium
-
swift project swiftnio extras, apple swift-nio-extras +1 more
SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression
CVE-2022-3252
Fix available
7.5 High