Vvapor

Products

Exploited and recent CVEs

• CVE-2026-28499 Medium 6.9 LeafKit's HTML escaping may be skipped for Collection values, enabling XSS 0.3%
• CVE-2026-27120 Medium 6.1 Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster 0.3%
• CVE-2024-21631 Medium 6.5 Integer overflow in URI leading to potential host spoofing 0.6%
• CVE-2023-44386 Medium 5.3 Incorrect request error handling triggers server crash in Vapor 0.7%
• CVE-2023-31136 Low 3.7 PostgresNIO processes unencrypted bytes from man-in-the-middle 0.5%
• CVE-2022-31019 High 7.5 DoS Vulnerability in URLEncodedFormDecoder in Vapor 1.7%
• CVE-2022-31005 High 7.5 Integer Overflow in Vapor's HTTP Range Request 2.1%
• CVE-2021-37634 High 7.4 LeafKit allows XSS with untrusted user input 0.7%
• CVE-2021-32742 High 7.5 Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash 1.2%
• CVE-2021-21328 Medium 5.3 Denial of Service 1.8%
• CVE-2020-15230 High 8.5 Arbitrary file read un Vapor 1.5%