Vulnerabilidades do Apple Swiftnio Http/2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apple Swiftnio Http/2: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:apple:swiftnio_http/2
CVE-2026-28898
Média · 5.3
CWE-116 25/06/2026
Improper Encoding or Escaping of Output em Apple Swiftnio Http/2
swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validation of all pseudo-header values (:path, :authority, :scheme, :method, and :status) at both the HPACK header validation layer and the HTTP/2-to-HTTP/1.1 translation layer. Requests or responses containing CR, LF, or NUL bytes in any pseudo-header value are now rejected with a connection error. This issue is fixed in swift-nio-http2 1.44.1.
CVE-2023-44487
Alta · 7.5
KEV Urgente · 73 Exploit público CWE-400 10/10/2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.