Swiftnio (Apple) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 154 known versions, newest CVE from 2026-08-20. Vendor: Apple.
CVEs of Swiftnio
- CVE-2026-43678 - CVSS 5.3 (medium), 2026-08-20: An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed…
- CVE-2022-3215 - CVSS 7.5 (high), 2022-09-28: NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts…
- CVE-2019-9518 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with…
- CVE-2019-9512 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer,…
- CVE-2019-9515 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to…
- CVE-2019-9511 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The…
- CVE-2019-9514 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an…
- CVE-2019-9517 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2…
- CVE-2019-9513 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and…
- CVE-2019-9516 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a…
- CVE-2018-4281 - CVSS 9.8 (critical), 2019-01-11: In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.
