Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

swift

swift

10,770 packages · swiftpackageindex.com

Security Advisories in swift

Moderate
about 2 months ago

swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability GSA_kwCzR0hTQS14dnI3LXAyYzYtajgzd84ABLC_

swift github.com/apple/swift-nio-http2
High
8 months ago

Sparkle Signing Checks Bypass GSA_kwCzR0hTQS13YzltLXIzdjYtOXA1aM4ABEJG

swift github.com/sparkle-project/Sparkle
Low
9 months ago

CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER GSA_kwCzR0hTQS13OHh2LXJ3Z2YtNGZ3aM4ABDT5

swift github.com/apple/swift-asn1
Moderate
11 months ago

wasm3 uncontrolled memory allocation vulnerability GSA_kwCzR0hTQS1mbXE2LTR3NTctMnczds4ABBGc

cargo, pypi, swift wasm3, pywasm3, github.com/shareup/wasm-interpreter-apple
Moderate
over 1 year ago

Un-sanitized metric name or labels can be used to take over exported metrics GSA_kwCzR0hTQS14NzY4LWN2cjItMzQ1cs4AA6dy

swift github.com/swift-server/swift-prometheus
High
over 1 year ago

yyjson has a Double Free vulnerability GSA_kwCzR0hTQS13aHg2LW05ajQtdzJtMs4AA5os

swift github.com/ibireme/yyjson
Moderate
over 1 year ago

Vapor contains an integer overflow in URI leading to potential host spoofing GSA_kwCzR0hTQS1yNnI0LTVwcjgtZ2pjcM4AA4Lw

swift github.com/vapor/vapor
Moderate
almost 2 years ago

Vapor's incorrect request error handling triggers server crash GSA_kwCzR0hTQS0zbXdxLWgzZzYtZmZobc4AA2Qq

swift github.com/vapor/vapor
High
about 2 years ago

Path traversal in ZIPFoundation GSA_kwCzR0hTQS1jMmNjLTM1NjktNmpoMs4AA1lS

swift github.com/weichsel/ZIPFoundation
High
about 2 years ago

Path traversal in Zip Swift GSA_kwCzR0hTQS1nNDU0LXdqOXItanBnNM4AA1lP

swift github.com/marmelroy/Zip
High
about 2 years ago

SwiftTerm Code Injection vulnerability GSA_kwCzR0hTQS1qcTQzLXE4bXgtcjdtcc4AA0t8

swift github.com/migueldeicaza/SwiftTerm
High
over 2 years ago

Denial of Service via reachable assertion GSA_kwCzR0hTQS1yNnd3LTU5NjMtN3I5Nc4AAzxC

swift github.com/grpc/grpc-swift
High
over 2 years ago

Denial of service via HTTP/2 HEADERS frames padding GSA_kwCzR0hTQS1xMzZ4LXI1eDQtaDRxNs4AAzxB

swift github.com/apple/swift-nio-http2
Moderate
over 2 years ago

LeafKit allows XSS with untrusted user input GSA_kwCzR0hTQS1ydjN4LXhxM3ItOGo5aM4AAzxA

swift github.com/vapor/leaf-kit
High
over 2 years ago

Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec GSA_kwCzR0hTQS0yangyLXFjbTQtcmY5aM4AAzw_

swift github.com/grpc/grpc-swift
High
over 2 years ago

Uncontrolled Resource Consumption in LengthPrefixedMessageReader GSA_kwCzR0hTQS1yeG1qLWhnOXYtdnAzcM4AAzw-

swift github.com/grpc/grpc-swift
Moderate
over 2 years ago

Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash GSA_kwCzR0hTQS1wcXdoLWMyZjMtdnhtcc4AAzw9

swift github.com/vapor/vapor
Moderate
over 2 years ago

Vapor's Metrics integration could cause a system drain GSA_kwCzR0hTQS1nY2o5LWpqMzgtaHdtY84AAzw8

swift github.com/vapor/vapor
Moderate
over 2 years ago

Arbitrary file read using percent-encoded relative paths in FileMiddleware GSA_kwCzR0hTQS12Y3ZnLXhncjgtcDVncc4AAzw7

swift github.com/vapor/vapor
High
over 2 years ago

Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware GSA_kwCzR0hTQS12ajJtLTlmNWotbXByNc4AAzuh

swift github.com/vapor/vapor
High
over 2 years ago

Vapor vulnerable to denial of service in URLEncodedFormDecoder GSA_kwCzR0hTQS1xdnhnLXdqeGMtcjRnZ84AAzug

swift github.com/vapor/vapor
High
over 2 years ago

Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder GSA_kwCzR0hTQS0yMzljLTZjdjItd3d4OM4AAzuf

swift github.com/apple/swift-corelibs-foundation
High
over 2 years ago

SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression GSA_kwCzR0hTQS03NzNnLXgyNzQtOHFtZs4AAzue

swift github.com/apple/swift-nio-extras
Moderate
over 2 years ago

SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') GSA_kwCzR0hTQS03Zmo3LTM5d2otYzY0Zs4AAzud

swift github.com/apple/swift-nio
High
over 2 years ago

Async HTTP Client has CRLF Injection vulnerability in HTTP request headers GSA_kwCzR0hTQS12M3I1LXBqcG0tbXdncc4AAzuc

swift github.com/swift-server/async-http-client
Moderate
over 2 years ago

Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec GSA_kwCzR0hTQS00cmhxLXZxMjQtODhnd84AAzbD

swift github.com/grpc/grpc-swift
High
over 2 years ago

swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames GSA_kwCzR0hTQS1wZ2Z4LWc2cmMtOGNqds4AAzZR

swift github.com/apple/swift-nio-http2
High
over 2 years ago

swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length GSA_kwCzR0hTQS1jY3c5LXE1aDItOGMyd84AAzZQ

swift github.com/apple/swift-nio-http2
Critical
over 2 years ago

SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header GSA_kwCzR0hTQS1tZ2M0LXdxdjctNHB4bc4AAzZP

swift github.com/apple/swift-nio
High
over 2 years ago

swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding GSA_kwCzR0hTQS13M2Y2LXBjNTQtZ2Z3N84AAzZO

swift github.com/apple/swift-nio-http2
Low
over 2 years ago

PostgresNIO processes unencrypted bytes from man-in-the-middle GSA_kwCzR0hTQS05Y2ZoLXZ4OTMtODR2ds4AAzRE

swift github.com/vapor/postgres-nio
High
over 2 years ago

zstd vulnerable to buffer overrun GSA_kwCzR0hTQS01YzljLTZ4ODctZjl2bc4AAyfJ

swift github.com/facebook/zstd
Critical
over 3 years ago

SwiftNIO SSL arbitrary code execution vulnerability GSA_kwCzR0hTQS1mcmczLWdwY3gtOTY4Zs4AAjE-

swift github.com/apple/swift-nio-ssl

Filter by Severity

High 18 Moderate 11 Low 2 Critical 2

Filter by Package

github.com/vapor/vapor 7 github.com/apple/swift-nio-http2 5 github.com/grpc/grpc-swift 4 github.com/apple/swift-nio 2 github.com/facebook/zstd 1 github.com/sparkle-project/Sparkle 1 github.com/apple/swift-corelibs-foundation 1 github.com/apple/swift-nio-ssl 1 github.com/weichsel/ZIPFoundation 1 github.com/vapor/leaf-kit 1 pywasm3 1 github.com/migueldeicaza/SwiftTerm 1 github.com/vapor/postgres-nio 1 github.com/marmelroy/Zip 1 github.com/apple/swift-asn1 1 github.com/swift-server/swift-prometheus 1 github.com/apple/swift-nio-extras 1 wasm3 1 github.com/ibireme/yyjson 1 github.com/shareup/wasm-interpreter-apple 1 github.com/swift-server/async-http-client 1

Filter by Repository

https://github.com/vapor/vapor 7 https://github.com/apple/swift-nio-http2 5 https://github.com/grpc/grpc-swift 4 https://github.com/apple/swift-nio 2 https://github.com/apple/swift-asn1 1 https://github.com/apple/swift-corelibs-foundation 1 https://github.com/apple/swift-nio-extras 1 https://github.com/apple/swift-nio-ssl 1 https://github.com/facebook/zstd 1 https://github.com/ibireme/yyjson 1 https://github.com/marmelroy/Zip 1 https://github.com/migueldeicaza/SwiftTerm 1 https://github.com/sparkle-project/Sparkle 1 https://github.com/swift-server/async-http-client 1 https://github.com/swift-server/swift-prometheus 1 https://github.com/vapor/leaf-kit 1 https://github.com/vapor/postgres-nio 1 https://github.com/wasm3/wasm3 1 https://github.com/weichsel/ZIPFoundation 1