Search Vulnerabilities

swift-nio-http2: Missing CR/LF/NUL validation in header values

SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS

SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow

SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection

Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta

container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

Swift Crypto: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length

LeafKit's HTML escaping may be skipped for Collection values, enabling XSS

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

Container and Containerization archive extraction does not guard against escapes from extraction base directory.

Swift W3C TraceContext vulnerable to a malformed HTTP header causing a crash

jose-swift has JWT Signature Verification Bypass via None Algorithm

AWS SDK for Swift adopted defense in depth enhancement for region parameter value

swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability

ExecuTorch integer overflow vulnerability

ExecuTorch heap buffer overflow vulnerability