SwiftURL incidents
Recent SwiftURL vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.
SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle Signing Checks Bypass
Sparkle Signing Checks Bypass
wasm3 uncontrolled memory allocation vulnerability
wasm3 uncontrolled memory allocation vulnerability
pywasm3: all versions
Un-sanitized metric name or labels can be used to take over exported metrics
Un-sanitized metric name or labels can be used to take over exported metrics
Vapor contains an integer overflow in URI leading to potential host spoofing
Vapor contains an integer overflow in URI leading to potential host spoofing
HTTP/2 Stream Cancellation Attack
HTTP/2 Stream Cancellation Attack
org.apache.tomcat:tomcat-coyote: 11.0.0-M1 → 11.0.0-M12
Vapor's incorrect request error handling triggers server crash
Vapor's incorrect request error handling triggers server crash
Denial of service via HTTP/2 HEADERS frames padding
Denial of service via HTTP/2 HEADERS frames padding
github.com/apple/swift-nio-http2: 1.0.0 → 1.20
Tooling for SwiftURL
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.