Skip to content
Fencer Intel

All · swift

Newest first, late arrivals on top. Also a feed.

  1. 8.6
    CVE-2024-25713 yyjson has a Double Free vulnerability
    swift
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  2. 6.5
    CVE-2024-21631 Integer overflow in URI leading to potential host spoofing
    swift
  3. 5.9
    CVE-2023-26154 pubnub Insufficient Entropy vulnerability
    npmmavengonugetswiftrubygemscrates.iopackagistpubpypi
  4. 7.5
    CVE-2023-44487 HTTP/2 Stream Cancellation Attack
    Node.jsKubernetesnginxJenkinsswiftgomavenbitnamijulia
    kev 1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  5. 5.3
    CVE-2023-44386 Incorrect request error handling triggers server crash in Vapor
    swift
  6. 7.8
    CVE-2023-39138 Path traversal in ZIPFoundation
    swift
  7. 7.8
    CVE-2023-39135 Path traversal in Zip Swift
    swift
  8. 4.2
    CVE-2021-32050 Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application
    packagistnpmswiftjulia
  9. 9.8
    GHSA-mgc4-wqv7-4pxm SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header
    swift
  10. 3.7
    CVE-2023-31136 PostgresNIO processes unencrypted bytes from man-in-the-middle
    swift
  11. 7.5
    CVE-2022-4899 zstd vulnerable to buffer overrun
    swiftpypi
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  12. 7.5
    CVE-2023-0040 Async HTTP Client has CRLF Injection vulnerability in HTTP request headers
    swift
  13. 7.1
    CVE-2022-23465 SwiftTerm vulnerable to arbitrary command execution
    swift
  14. 7.5
    CVE-2022-3215 SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
    swift
  15. 7.5
    CVE-2022-3252 SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression
    swift
  16. 7.5
    CVE-2022-1642 Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder
    swift
  17. 7.5
    CVE-2022-31019 DoS Vulnerability in URLEncodedFormDecoder in Vapor
    swift
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  18. 7.5
    CVE-2022-31005 Integer Overflow in Vapor's HTTP Range Request
    swift
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  19. 7.5
    CVE-2022-24777 Denial of Service via reachable assertion in grpc-swift
    swift
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  20. 7.5
    CVE-2022-0618 Denial of service via HTTP/2 HEADERS frames padding
    swift
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  21. 7.5
    CVE-2022-24668 swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames
    swift
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  22. 7.5
    CVE-2022-24667 swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding
    swift
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  23. 7.5
    CVE-2022-24666 swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length
    swift
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  24. 7.4
    CVE-2021-37634 LeafKit allows XSS with untrusted user input
    swift
  25. 7.5
    CVE-2021-32742 Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
    swift
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  26. 7.5
    CVE-2021-36153 Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec
    swift
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  27. 7.5
    CVE-2021-36155 Uncontrolled Resource Consumption in LengthPrefixedMessageReader
    swift
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  28. 7.5
    CVE-2021-36154 Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec
    swift
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  29. 5.3
    CVE-2021-21328 Denial of Service
    swift
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  30. 8.5
    CVE-2020-15230 Arbitrary file read un Vapor
    swift
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%