Skip to content
OpenAdvisories

Package · SwiftURL

github.com/apple/swift-nio-extras

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2026-28975

    NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

    ### Impact When `NIOHTTPRequestDecompressor` is configured with `.ratio(N)`, the decompression limit is enforced using the `Content-Length` header value from the incoming request rather than the actual number of compressed bytes received. Since `Content-Lengt…

    github.com/apple/swift-nio-extras SwiftURL