github.com/vapor/vapor
Swift · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Vapor contains an integer overflow in URI leading to potential host spoofing | github.com/vapor/vapor | Swift | Medium | Fix reported | |
| Vapor's incorrect request error handling triggers server crash | github.com/vapor/vapor | Swift | Medium | Fix reported | |
| Vapor's Metrics integration could cause a system drain | github.com/vapor/vapor | Swift | Medium | Fix reported | |
| Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash | github.com/vapor/vapor | Swift | Medium | Fix reported | |
| Arbitrary file read using percent-encoded relative paths in FileMiddleware | github.com/vapor/vapor | Swift | Medium | Fix reported | |
| Vapor vulnerable to denial of service in URLEncodedFormDecoder | github.com/vapor/vapor | Swift | High | Fix reported | |
| Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware | github.com/vapor/vapor | Swift | High | Fix reported |