Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
swift OpenStack Swift vulnerable to authenticated server-side request forgery Medium Risk 5.4 3 months ago 3 days ago
github.com/apple/swift-nio SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow High Risk 8.0 3 months ago 18 days ago
github.com/apple/swift-nio SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator Medium Risk 6.0 3 months ago 18 days ago
github.com/apple/swift-nio-extras NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length Medium Risk 6.0 3 months ago 18 days ago
github.com/apple/swift-nio SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS High Risk 8.0 3 months ago 18 days ago
friendsofsymfony1/swiftmailer Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency Medium Risk 5.0 2 years ago 18 days ago
swiftmailer/swiftmailer Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency Medium Risk 5.0 2 years ago 18 days ago
github.com/apple/swift-nio-http2 HTTP/2 Stream Cancellation Attack Medium Risk 5.3 2 years ago 18 days ago
github.com/apple/swift-nio-http2 Denial of service via HTTP/2 HEADERS frames padding High Risk 7.5 3 years ago 18 days ago
github.com/swift-server/swift-prometheus Un-sanitized metric name or labels can be used to take over exported metrics Medium Risk 5.9 2 years ago 18 days ago
drupal/swiftype No summary available Unknown 4 years ago 18 days ago
drupal/swiftmailer No summary available Unknown 2 years ago 18 days ago
swift-optimizer Malicious code in swift-optimizer (npm) Unknown 4 months ago 1 month ago
github.com/apple/swift-nio-http2 SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec Medium Risk 5.3 3 months ago 2 months ago
github.com/apple/swift-nio-http2 swift-nio-http2: Missing CR/LF/NUL validation in header values Medium Risk 5.3 2 months ago 2 months ago
ms-swift ms-swift: Image Cache Hash Collision via Missing Dimension Metadata Low Risk 3.6 3 months ago 2 months ago
ms-swift ms-swift: Image Cache Hash Collision via Missing Dimension Metadata Low Risk 3.6 2 months ago 2 months ago
swift OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body High Risk 8.0 4 months ago 2 months ago
swift OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body Unknown 2 months ago 2 months ago
swift No summary available Unknown 12 years ago 2 months ago
swift-parse-stream Malicious code in swift-parse-stream (npm) Unknown 3 months ago 2 months ago
github.com/grpc/grpc-swift Uncontrolled Resource Consumption in LengthPrefixedMessageReader High Risk 7.5 3 years ago 2 months ago
github.com/apple/swift-nio-http2 swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding High Risk 7.5 3 years ago 2 months ago
github.com/apple/swift-nio-http2 swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length High Risk 7.5 3 years ago 2 months ago
github.com/apple/swift-corelibs-foundation Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder High Risk 7.5 3 years ago 2 months ago
github.com/swift-server/async-http-client Async HTTP Client has CRLF Injection vulnerability in HTTP request headers High Risk 7.5 3 years ago 2 months ago
github.com/apple/swift-nio SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Medium Risk 5.3 3 years ago 2 months ago
github.com/apple/swift-nio-http2 swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames High Risk 7.5 3 years ago 2 months ago
github.com/grpc/grpc-swift Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec High Risk 8.0 3 years ago 2 months ago
github.com/grpc/grpc-swift Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec Medium Risk 6.0 3 years ago 2 months ago
github.com/apple/swift-nio-extras SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression High Risk 7.5 3 years ago 2 months ago
ms-swift MS SWIFT Remote Code Execution via unsafe PyYAML deserialization Critical 9.8 1 year ago 2 months ago
ms-swift MS SWIFT WEB-UI RCE Vulnerability Medium Risk 6.0 1 year ago 2 months ago
github.com/pubnub/swift pubnub Insufficient Entropy vulnerability Medium Risk 5.9 2 years ago 2 months ago
ms-swift MS SWIFT WEB-UI RCE Vulnerability Unknown 2 months ago 2 months ago
ms-swift MS SWIFT Remote Code Execution via unsafe PyYAML deserialization Critical 9.8 2 months ago 2 months ago
swift OpenStack Object Storage (Swift) Sensitive Data Exposure Medium Risk 6.0 4 years ago 2 months ago
swift OpenStack Swift Cross-site Scriping vulnerability Medium Risk 6.0 4 years ago 2 months ago
swift OpenStack Swift Unauthorized delete of versioned Swift object Medium Risk 6.0 4 years ago 2 months ago
swift OpenStack Swift XML external entities (XXE) Injection Medium Risk 6.5 3 years ago 2 months ago
swift OpenStack Swift metadata constraints are not correctly enforced Medium Risk 6.0 4 years ago 2 months ago
swift OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service High Risk 7.5 4 years ago 2 months ago
swift OpenStack Swift allows authenticated users to cause a denial of service Medium Risk 6.0 4 years ago 2 months ago
swift OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service High Risk 7.5 4 years ago 2 months ago
swift OpenStack Swift Unchecked user input in XML responses High Risk 8.0 4 years ago 2 months ago
swift OpenStack Swift XML external entities (XXE) Injection Medium Risk 6.5 2 months ago 2 months ago
swift OpenStack Swift Cross-site Scriping vulnerability Unknown 2 months ago 2 months ago
swift OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service High Risk 7.5 2 months ago 2 months ago
swift OpenStack Swift Unchecked user input in XML responses Unknown 2 months ago 2 months ago
swift OpenStack Object Storage (Swift) Sensitive Data Exposure Unknown 2 months ago 2 months ago