Skip to content
OpenAdvisories

Package · SwiftURL

github.com/apple/swift-nio-http2

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-28898

    SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

    swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validation of all pseudo-header values (:path, :authority, :scheme, :…

    Apple swift-nio-http2 github.com/apple/swift-nio-http2 SwiftURL
  • Medium —
    GHSA-xvr7-p2c6-j83w

    swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability

    The HTTP/2 [MadeYouReset vulnerability](https://galbarnahum.com/made-you-reset) has a mild effect on swift-nio-http2. swift-nio-http2 mostly protects against MadeYouReset by using a number of existing denial-of-service prevention patterns that we added in res…

    github.com/apple/swift-nio-http2 SwiftURL