Swift

Swift Project

CVEs, 365 days010 all time, 0 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationSwift Project
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeThe Swift Project only.
Advisorieshttps://swift.org/support/security.html
  • CVE-2025-0343 2025-01-15
    Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes tha
  • CVE-2022-3918 2023-01-20
    A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability,
  • CVE-2023-0040 2023-01-18
    Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result
  • CVE-2022-3215 2022-09-28
    NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts user
  • CVE-2022-3252 2022-09-21
    Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or respo
  • CVE-2022-1642 2022-06-16
    A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document contain
  • CVE-2022-0618 2022-03-09
    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerabili
  • CVE-2022-24668 2022-02-09
    A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all sw
  • CVE-2022-24667 2022-02-09
    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. Th
  • CVE-2022-24666 2022-02-09
    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affe

All CVE Program partners