Apple swift-nio

• CVE-2026-43678 Medium 5.3 An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active con 0.4%