SH
Product
Swiftnio Http/2
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Swiftnio Http/2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: before 1.28.0 |
| CVE-2022-0618 | 7.5 | Mar 10 | A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame Affected: 1.0.0 before 1.20.0 |
| CVE-2022-24668 | 7.5 | Feb 9 | A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames Affected: 1.0.0 before 1.19.2 |
| CVE-2022-24667 | 7.5 | Feb 9 | A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block Affected: 1.0.0 before 1.19.2 |
| CVE-2022-24666 | 7.5 | Feb 9 | A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame Affected: 1.0.0 before 1.19.2 |
| CVE-2026-64785 | 5.3 | Jul 23 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's… Affected: before 1.45.0 |
| CVE-2026-28898 | 5.3 | Jun 25 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message Affected: before 1.44.1 |
Showing 7