TI-2026-65766 CVE-2026-103922 · GHSA-rvm3-566m-v7fv
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
Priority MEDIUM 42
Capacitor is a cross-platform native runtime for web applications.
Swift
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Swift records in CISA KEVNo Swift vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2020-07937 CVE-2020-9861 · GHSA-g4pr-mpxh-7vhq
Uncontrolled recursion in Swift 5.1.5 for Linux
Priority LOW 36
A stack overflow issue existed in Swift for Linux.
TI-2020-07917 CVE-2020-9840
In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.
Priority LOW 35
In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.
TI-2018-11744 CVE-2018-16386 · GHSA-qv85-hhhm-mvmf
An issue was discovered in SWIFT Alliance Web Platform 7.1.23.
Priority LOW 35
An issue was discovered in SWIFT Alliance Web Platform 7.1.23.
TI-2025-04722 CVE-2025-5258 · GHSA-h92v-jw8j-wqf3
Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Priority LOW 28
The Conference Scheduler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 2.5.1 due to insufficient input sanitization and output escap…