vapor · threatengine.sh

CVE-2026-28499

< 1.14.2

LeafKit is a templating language with Swift-inspired syntax. Prior to version 1.14.2, HTML escaping doesn't work correctly when a

6.1MEDIUM

CVE-2026-27120

< 1.14.1

Leafkit is a templating language with Swift-inspired syntax. Prior to 1.4.1, htmlEscaped in leaf-kit will only escape html special

6.1MEDIUM

CVE-2024-21631

< 4.90.0

Vapor is an HTTP web framework for Swift. Prior to version 4.90.0, Vapor's vapor_urlparser_parse function uses uint16_t indexe

6.5MEDIUM

CVE-2023-44386

>= 4.83.2 and < 4.84.2

Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of V

5.3MEDIUM

CVE-2023-31136

< 1.14.2

PostgresNIO is a Swift client for PostgreSQL. Any user of PostgresNIO prior to version 1.14.2 connecting to servers with TLS enabl

3.7LOW

CVE-2022-31019

< 4.61.1

Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request body that c

7.5HIGH

CVE-2022-31005

< 4.60.3

Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an

7.5HIGH

CVE-2021-37634

< 1.3.0

Leafkit is a templating language with Swift-inspired syntax. Versions prior to 1.3.0 are susceptible to Cross-site Scripting (XSS)

7.4HIGH

CVE-2021-32742

< 4.47.2

Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.init(base32Encoded:) function opens up the pot

7.5HIGH

CVE-2021-21328

< 4.40.1

Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics

5.3MEDIUM

CVE-2020-15230

< 4.29.4

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the

8.5HIGH