Skip to content
OpenAdvisories

Package · SwiftURL

github.com/apple/swift-nio-extras

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    CVE-2026-28975

    NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

    ### Impact When `NIOHTTPRequestDecompressor` is configured with `.ratio(N)`, the decompression limit is enforced using the `Content-Length` header value from the incoming request rather than the actual number of compressed bytes received. Since `Content-Lengt…

    github.com/apple/swift-nio-extras SwiftURL
  • High 7.5
    CVE-2022-3252

    SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression

    Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPRequestDecompressor and HTTPResponseDecompressor) both failed to…

    Swift Project SwiftNIO Extras github.com/apple/swift-nio-extras SwiftURL