SH
Product
Swiftnio Http/2
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Swiftnio Http/2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64785 | 5.3 | Jul 23 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's… Affected: before 1.45.0 |
| CVE-2026-28898 | 5.3 | Jun 25 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message Affected: before 1.44.1 |
Showing 2