Skip to content
OpenAdvisories

Package · SwiftURL

swift-nio-http2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-64785

    swift-nio-http2: Missing CR/LF/NUL validation in header values

    SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. This vulnerabili…

    Apple swift-nio-http2 swift-nio-http2 SwiftURL