Skip to content
OpenAdvisories

Ecosystem

SwiftURL

61 known vulnerabilities.

Most affected packages

github.com/vapor/vapor 7 github.com/apple/swift-nio-http2 7 github.com/pytorch/executorch 6 github.com/apple/swift-nio 5 github.com/grpc/grpc-swift 4 github.com/vapor/leaf-kit 3 github.com/sparkle-project/Sparkle 3 github.com/apple/container 2 github.com/apple/swift-nio-extras 2 github.com/ionic-team/capacitor-swift-pm 1 github.com/shareup/wasm-interpreter-apple 1 github.com/pubnub/swift 1 github.com/apple/swift-corelibs-foundation 1 github.com/square/wire 1 github.com/beatt83/jose-swift 1 github.com/vapor/postgres-nio 1 swift-crypto 1 github.com/weichsel/ZIPFoundation 1 github.com/apple/containerization 1 github.com/apple/swift-nio-ssl 1 github.com/marmelroy/Zip 1 github.com/migueldeicaza/SwiftTerm 1 github.com/swift-otel/swift-w3c-trace-context 1 github.com/swift-otel/swift-otel 1 github.com/awslabs/aws-sdk-swift 1 swift-nio-http2 1 CocoaMQTT 1 github.com/swift-server/async-http-client 1 github.com/apple/swift-asn1 1 github.com/ibireme/yyjson 1 github.com/swift-server/swift-prometheus 1 github.com/mongodb/mongo-swift-driver 1 github.com/facebook/zstd 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-39g5-644c-qwcg

    container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

    #### Product Name: container Github Link: https://github.com/apple/container Version: <= 0.12.2 #### Summary The `container system dns create --localhost` command accepts a `domainName` argument and passes it unsanitized into the pf anchor file (`/etc/pf.anch…

    github.com/apple/container SwiftURL
  • Low 3.7
    GHSA-pc9j-5v36-2mww

    AWS SDK for Swift adopted defense in depth enhancement for region parameter value

    CVSSv3.1 Rating: 3.7 (LOW) Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid…

    github.com/awslabs/aws-sdk-swift SwiftURL
  • Low 3.7
    CVE-2023-31136

    PostgresNIO processes unencrypted bytes from man-in-the-middle

    PostgresNIO is a Swift client for PostgreSQL. Any user of PostgresNIO prior to version 1.14.2 connecting to servers with TLS enabled is vulnerable to a man-in-the-middle attacker injecting false responses to the client's first few queries, despite the use of …

    vapor postgres-nio github.com/vapor/postgres-nio SwiftURL