Log in Start free

Swift Project

Products

ProductCVEsExploitedLatest
SwiftNIO HTTP24–Mar 9, 2022
Swift ASN11–Jan 15, 2025
Swift Corelib-Foundation1–Jun 16, 2022
Async HTTP Client1–Jan 18, 2023
SwiftNIO1–Sep 28, 2022
SwiftNIO Extras1–Sep 21, 2022
Swift Foundation1–Jan 20, 2023

Exploited and recent CVEs

  • CVE-2025-0343 High 7.5 Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided i 0.3%
  • CVE-2022-3918 High 8.8 A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF 0.8%
  • CVE-2023-0040 High 7.5 Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP head 0.6%
  • CVE-2022-3215 High 7.5 NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts user generated input from an incoming reques 0.7%
  • CVE-2022-3252 Unrated Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPReque 0.8%
  • CVE-2022-1642 Unrated A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability 0.7%
  • CVE-2022-0618 Unrated A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when par 1.3%
  • CVE-2022-24668 Unrated A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.1 1.1%
  • CVE-2022-24667 Unrated A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 ve 1.1%
  • CVE-2022-24666 Unrated A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1. 1.4%