All products

github.com/apple/swift-nio-http2

Swift · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Denial of service via HTTP/2 HEADERS frames paddingCVE-2022-0618 · GHSA-Q36X-R5X4-H4Q6 github.com/apple/swift-nio-http2 Swift High Fix reported
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1CodecCVE-2026-28898 · GHSA-4PX2-PW77-VC85 github.com/apple/swift-nio-http2 Swift Medium Fix reported
swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encodingCVE-2022-24667 · GHSA-W3F6-PC54-GFW7 github.com/apple/swift-nio-http2 Swift High Fix reported
swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame lengthCVE-2022-24666 · GHSA-CCW9-Q5H2-8C2W github.com/apple/swift-nio-http2 Swift High Fix reported
swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN framesCVE-2022-24668 · GHSA-PGFX-G6RC-8CJV github.com/apple/swift-nio-http2 Swift High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
swift-nio-http2 affected by HTTP/2 MadeYouReset vulnerabilityGHSA-XVR7-P2C6-J83W github.com/apple/swift-nio-http2 Swift Medium Fix reported