Swift Project vulnerabilities

Products

• Swiftnio Http2 4
• Swiftnio Extras 2

Newest

• swift project asn1 CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER CVE-2025-0343 Fix available 7.5 HighJanuary 14, 2025
• swift project foundation, apple swift foundation +1 more A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF… CVE-2022-3918 8.8 HighJanuary 20, 2023
• swift project async http client, asynchttpclient project async-http-client +1 more Async HTTP Client has CRLF Injection vulnerability in HTTP request headers CVE-2023-0040 Fix available 7.5 HighJanuary 18, 2023
• apple swiftnio SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-3215 Fix available 7.5 HighSeptember 28, 2022
• swift project swiftnio extras, apple swift-nio-extras +1 more SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression CVE-2022-3252 Fix available 7.5 HighSeptember 21, 2022
• apple swift, swift project corelib-foundation +1 more Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder CVE-2022-1642 Fix available 7.5 HighJune 16, 2022
• apple swiftnio http\/2, swift project swiftnio http2 +1 more Denial of service via HTTP/2 HEADERS frames padding CVE-2022-0618 Fix available 7.5 HighMarch 9, 2022
• apple swiftnio http\/2, swift project swiftnio http2 +1 more swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames CVE-2022-24668 Fix available 7.5 HighFebruary 9, 2022
• apple swiftnio http\/2, swift project swiftnio http2 +1 more swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding CVE-2022-24667 Fix available 7.5 HighFebruary 9, 2022
• apple swiftnio http\/2, swift project swiftnio http2 +1 more swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length CVE-2022-24666 Fix available 7.5 HighFebruary 9, 2022
• swift swiftnio extras, apple nioextras +1 more In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions. CVE-2020-9840 7.5 HighMay 11, 2020