Skip to content
OpenAdvisories

Vendor

Swift Project

10 known vulnerabilities.

Swift Project at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Products

SwiftNIO HTTP2 4 Async HTTP Client 1 Swift Corelib-Foundation 1 SwiftNIO Extras 1 Swift ASN1 1 Swift Foundation 1 SwiftNIO 1
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.5
    CVE-2025-0343

    CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER

    Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a…

    Swift Project Swift ASN1 github.com/apple/swift-asn1 SwiftURL
  • High 8.8
    CVE-2022-3918

    A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in UR…

    Swift Project Swift Foundation
  • High 7.5
    CVE-2023-0040

    Async HTTP Client has CRLF Injection vulnerability in HTTP request headers

    Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network. Users a…

    Swift Project Async HTTP Client github.com/swift-server/async-http-client SwiftURL
  • High 7.5
    CVE-2022-3215

    SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

    NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts user generated input from an incoming request and reflects it into a HTTP/1.1 response header in some f…

    Swift Project SwiftNIO github.com/apple/swift-nio SwiftURL
  • High 7.5
    CVE-2022-3252

    SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression

    Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPRequestDecompressor and HTTPResponseDecompressor) both failed to…

    Swift Project SwiftNIO Extras github.com/apple/swift-nio-extras SwiftURL
  • High 7.5
    CVE-2022-1642

    Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder

    A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mech…

    Swift Project Swift Corelib-Foundation github.com/apple/swift-corelibs-foundation SwiftURL
  • High 7.5
    CVE-2022-0618

    Denial of service via HTTP/2 HEADERS frames padding

    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame where th…

    Swift Project SwiftNIO HTTP2 github.com/apple/swift-nio-http2 SwiftURL
  • High 7.5
    CVE-2022-24668

    swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames

    A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error after …

    Swift Project SwiftNIO HTTP2 github.com/apple/swift-nio-http2 SwiftURL
  • High 7.5
    CVE-2022-24667

    swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding

    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implemen…

    Swift Project SwiftNIO HTTP2 github.com/apple/swift-nio-http2 SwiftURL
  • High 7.5
    CVE-2022-24666

    swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length

    A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical er…

    Swift Project SwiftNIO HTTP2 github.com/apple/swift-nio-http2 SwiftURL