SW
Product
swift-nio-http2
2
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add swift-nio-http2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64785 | 5.3 | Jul 23 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's… Affected: before 1.45.0 |
| CVE-2026-28898 | 5.3 | Jun 25 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message Affected: before 1.44.1 |
Showing 2