Swift
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Conference Scheduler | 1 | – | Jun 24, 2025 |
| github.com/ionic-team/capacitor-swift-pm | 1 | – | Oct 1, 2026 |
| Swift 5.1.5 for Linux | 1 | – | Nov 2, 2020 |
| SwiftNIO Extras | 1 | – | May 11, 2020 |
Exploited and recent CVEs
- CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path 0.3%
- CVE-2025-5258 Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter 0.3%
- CVE-2020-9861 A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input. 1.5%
- CVE-2020-9840 In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions. 1.0%