SW
Product
swift-crypto
3
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add swift-crypto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43823 | 7.5 | Jul 23 | When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit Affected: before 4.5.1 |
| CVE-2026-28815 | 7.5 | Apr 3 | A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure… Affected: 4.0.0 before 4.3.1 |
Showing 2