Swift Project vulnerabilities

CVEs per yearBy the year they were published

1. 20227
2. 20232
3. 20251

Newest CVEs

• CVE-2025-0343

  Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes…

  Swift Project · Swift ASN1

  High7.5
• CVE-2022-3918

  A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability,…

  Swift Project · Swift Foundation

  High8.8
• CVE-2023-0040

  Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the…

  Swift Project · Async HTTP Client

  High7.5
• CVE-2022-3215

  NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts…

  Swift Project · SwiftNIO

  High7.5
• CVE-2022-3252

  Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or…

  Swift Project · SwiftNIO Extras

  High7.5
• CVE-2022-1642

  A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document…

  Swift Project · Swift Corelib-Foundation

  High7.5
• CVE-2022-0618

  A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This…

  Swift Project · SwiftNIO HTTP2

  High7.5
• CVE-2022-24668

  A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all…

  Swift Project · SwiftNIO HTTP2

  High7.5
• CVE-2022-24667

  A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block.…

  Swift Project · SwiftNIO HTTP2

  High7.5
• CVE-2022-24666

  A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack…

  Swift Project · SwiftNIO HTTP2

  High7.5