Vulnerabilities of Apple swift-nio-http2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-64785 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters… | 5.3 Medium | Jul 23, 2026 |
| CVE-2026-28898 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing… | 5.3 Medium | Jun 25, 2026 |