https://vulnogram.org/ Most recent CVEs assigned by Swift Project (swift). https://vulnogram.org/seaview/icons/swift.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-0343 https://vulnogram.org/CVE-2025-0343 Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will… High Network Exploitable Wed, 15 Jan 2025 00:48:07 GMT https://vulnogram.org/CVE-2022-3918 https://vulnogram.org/CVE-2022-3918 A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When tha… High Fri, 20 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-0040 https://vulnogram.org/CVE-2023-0040 Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network… High Network Exploitable Wed, 18 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-3215 https://vulnogram.org/CVE-2022-3215 NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts user generated input from an incoming request and reflects it into a HTTP/1.1 response header… High Network Exploitable Wed, 28 Sep 2022 19:32:30 GMT https://vulnogram.org/CVE-2022-3252 https://vulnogram.org/CVE-2022-3252 Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPRequestDecompressor and HTTPResponseDecompressor) both… Wed, 21 Sep 2022 18:45:16 GMT https://vulnogram.org/CVE-2022-1642 https://vulnogram.org/CVE-2022-1642 A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserializa… Thu, 16 Jun 2022 16:39:46 GMT https://vulnogram.org/CVE-2022-0618 https://vulnogram.org/CVE-2022-0618 A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame… Wed, 09 Mar 2022 20:23:38 GMT https://vulnogram.org/CVE-2022-24668 https://vulnogram.org/CVE-2022-24668 A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical err… Wed, 09 Feb 2022 22:05:18 GMT https://vulnogram.org/CVE-2022-24667 https://vulnogram.org/CVE-2022-24667 A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of… Wed, 09 Feb 2022 22:05:17 GMT https://vulnogram.org/CVE-2022-24666 https://vulnogram.org/CVE-2022-24666 A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a l… Wed, 09 Feb 2022 22:05:16 GMT