swift
Security Advisories in swift
Critical
6 days ago
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
npm, maven, swift
@capacitor/ios, @capacitor/android, com.capacitorjs:core, github.com/ionic-team/capacitor-swift-pm
High
18 days ago
Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service
swift
github.com/square/wire
Moderate
3 months ago
swift-nio-http2: Missing CR/LF/NUL validation in header values
swift
swift-nio-http2
Moderate
4 months ago
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
swift
github.com/apple/swift-nio-http2
Moderate
4 months ago
NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
swift
github.com/apple/swift-nio-extras
High
4 months ago
SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
swift
github.com/apple/swift-nio
High
4 months ago
SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
swift
github.com/apple/swift-nio
Moderate
4 months ago
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
swift
github.com/apple/swift-nio
Moderate
4 months ago
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
swift
github.com/sparkle-project/Sparkle
Moderate
4 months ago
Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta
swift
github.com/sparkle-project/Sparkle
Low
5 months ago
container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command
swift
github.com/apple/container
Moderate
6 months ago
CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing
swift
CocoaMQTT
High
6 months ago
Swift Crypto: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length
swift
swift-crypto
Moderate
7 months ago
LeafKit's HTML escaping may be skipped for Collection values, enabling XSS
swift
github.com/vapor/leaf-kit
Moderate
8 months ago
Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster
swift
github.com/vapor/leaf-kit
Low
9 months ago
Container and Containerization archive extraction does not guard against escapes from extraction base directory.
swift
github.com/apple/container, github.com/apple/containerization
Moderate
9 months ago
Swift W3C TraceContext vulnerable to a malformed HTTP header causing a crash
swift
github.com/swift-otel/swift-otel, github.com/swift-otel/swift-w3c-trace-context
High
9 months ago
jose-swift has JWT Signature Verification Bypass via None Algorithm
swift
github.com/beatt83/jose-swift
Low
9 months ago
AWS SDK for Swift adopted defense in depth enhancement for region parameter value
swift
github.com/awslabs/aws-sdk-swift
Moderate
about 1 year ago
swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability
swift
github.com/apple/swift-nio-http2
Critical
about 1 year ago
ExecuTorch vulnerable to Heap-based Buffer Overflow
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
Critical
about 1 year ago
ExecuTorch integer overflow vulnerability
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
Critical
about 1 year ago
ExecuTorch integer overflow vulnerability
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
Critical
about 1 year ago
ExecuTorch out-of-bounds access vulnerability
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
Critical
about 1 year ago
ExecuTorch heap buffer overflow vulnerability
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
High
over 1 year ago
ExecuTorch vulnerable to Heap-based Buffer Overflow attack
swift, maven, pypi
github.com/pytorch/executorch, org.pytorch:executorch-android, executorch
Low
over 1 year ago
CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER
swift
github.com/apple/swift-asn1
Moderate
almost 2 years ago
wasm3 uncontrolled memory allocation vulnerability
cargo, pypi, swift
wasm3, pywasm3, github.com/shareup/wasm-interpreter-apple
Moderate
over 2 years ago
Un-sanitized metric name or labels can be used to take over exported metrics
swift
github.com/swift-server/swift-prometheus
Moderate
almost 3 years ago
Vapor contains an integer overflow in URI leading to potential host spoofing
swift
github.com/vapor/vapor
Moderate
about 3 years ago
HTTP/2 Stream Cancellation Attack
maven, swift, go
org.apache.tomcat:tomcat-coyote, com.typesafe.akka:akka-http-core_2.11, com.typesafe.akka:akka-http-core_2.12, com.typesafe.akka:akka-http-core_2.13, com.typesafe.akka:akka-http-core, org.eclipse.jetty.http2:jetty-http2-server, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-common, github.com/apple/swift-nio-http2, org.apache.tomcat.embed:tomcat-embed-core, golang.org/x/net
Moderate
about 3 years ago
Vapor's incorrect request error handling triggers server crash
swift
github.com/vapor/vapor
Moderate
about 3 years ago
MongoDB Driver may publish events containing authentication-related data
swift, npm, packagist
github.com/mongodb/mongo-swift-driver, mongodb, mongodb/mongodb
High
about 3 years ago
SwiftTerm Code Injection vulnerability
swift
github.com/migueldeicaza/SwiftTerm
High
over 3 years ago
Denial of service via HTTP/2 HEADERS frames padding
swift
github.com/apple/swift-nio-http2
Moderate
over 3 years ago
LeafKit allows XSS with untrusted user input
swift
github.com/vapor/leaf-kit
High
over 3 years ago
Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec
swift
github.com/grpc/grpc-swift
High
over 3 years ago
Uncontrolled Resource Consumption in LengthPrefixedMessageReader
swift
github.com/grpc/grpc-swift
Moderate
over 3 years ago
Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
swift
github.com/vapor/vapor
Moderate
over 3 years ago
Vapor's Metrics integration could cause a system drain
swift
github.com/vapor/vapor
Moderate
over 3 years ago
Arbitrary file read using percent-encoded relative paths in FileMiddleware
swift
github.com/vapor/vapor
High
over 3 years ago
Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware
swift
github.com/vapor/vapor
High
over 3 years ago
Vapor vulnerable to denial of service in URLEncodedFormDecoder
swift
github.com/vapor/vapor
High
over 3 years ago
Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder
swift
github.com/apple/swift-corelibs-foundation
High
over 3 years ago
SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression
swift
github.com/apple/swift-nio-extras
Moderate
over 3 years ago
SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
swift
github.com/apple/swift-nio
High
over 3 years ago
Async HTTP Client has CRLF Injection vulnerability in HTTP request headers
swift
github.com/swift-server/async-http-client
Moderate
over 3 years ago
Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec
swift
github.com/grpc/grpc-swift
High
over 3 years ago
swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames
swift
github.com/apple/swift-nio-http2
High
over 3 years ago
swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length
swift
github.com/apple/swift-nio-http2
Critical
over 3 years ago
SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header
swift
github.com/apple/swift-nio
High
over 3 years ago
swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding
swift
github.com/apple/swift-nio-http2
Low
over 3 years ago
PostgresNIO processes unencrypted bytes from man-in-the-middle
swift
github.com/vapor/postgres-nio
Critical
over 4 years ago
SwiftNIO SSL arbitrary code execution vulnerability
swift
github.com/apple/swift-nio-ssl
Filter by Severity
Filter by Package
github.com/vapor/vapor
7
github.com/apple/swift-nio-http2
7
org.pytorch:executorch-android
6
executorch
6
github.com/pytorch/executorch
6
github.com/apple/swift-nio
5
github.com/grpc/grpc-swift
4
github.com/vapor/leaf-kit
3
github.com/sparkle-project/Sparkle
3
github.com/apple/container
2
github.com/apple/swift-nio-extras
2
github.com/apple/containerization
1
github.com/facebook/zstd
1
mongodb/mongodb
1
github.com/apple/swift-corelibs-foundation
1
com.typesafe.akka:akka-http-core_2.12
1
github.com/swift-otel/swift-otel
1
github.com/apple/swift-nio-ssl
1
org.eclipse.jetty.http2:http2-common
1
github.com/weichsel/ZIPFoundation
1
github.com/beatt83/jose-swift
1
swift-nio-http2
1
org.eclipse.jetty.http2:http2-server
1
@capacitor/ios
1
github.com/awslabs/aws-sdk-swift
1
pywasm3
1
com.typesafe.akka:akka-http-core_2.11
1
github.com/migueldeicaza/SwiftTerm
1
github.com/ionic-team/capacitor-swift-pm
1
golang.org/x/net
1
github.com/vapor/postgres-nio
1
github.com/marmelroy/Zip
1
zstd
1
github.com/apple/swift-asn1
1
github.com/swift-server/swift-prometheus
1
CocoaMQTT
1
wasm3
1
github.com/ibireme/yyjson
1
com.typesafe.akka:akka-http-core_2.13
1
com.typesafe.akka:akka-http-core
1
org.apache.tomcat.embed:tomcat-embed-core
1
github.com/mongodb/mongo-swift-driver
1
org.eclipse.jetty.http2:jetty-http2-server
1
mongodb
1
@capacitor/android
1
org.eclipse.jetty.http2:jetty-http2-common
1
github.com/swift-server/async-http-client
1
github.com/shareup/wasm-interpreter-apple
1
github.com/square/wire
1
com.capacitorjs:core
1
swift-crypto
1
github.com/swift-otel/swift-w3c-trace-context
1
org.apache.tomcat:tomcat-coyote
1
Filter by Repository
https://github.com/vapor/vapor
7
https://github.com/pytorch/executorch
6
https://github.com/apple/swift-nio-http2
6
https://github.com/grpc/grpc-swift
4
https://github.com/apple/swift-nio
2
https://github.com/ibireme/yyjson
1
https://github.com/facebook/zstd
1
https://github.com/vapor/postgres-nio
1
https://github.com/apple/swift-corelibs-foundation
1
https://github.com/vapor/leaf-kit
1
https://github.com/sparkle-project/Sparkle
1
https://github.com/migueldeicaza/SwiftTerm
1
https://github.com/swift-server/swift-prometheus
1
https://github.com/weichsel/ZIPFoundation
1
https://github.com/apple/swift-nio-extras
1
https://github.com/wasm3/wasm3
1
https://github.com/mongodb/mongo-php-driver
1
https://github.com/apple/swift-asn1
1
https://github.com/marmelroy/Zip
1
https://github.com/swift-server/async-http-client
1
https://github.com/apple/swift-nio-ssl
1