swoole

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

swoole records in CISA KEV

No swoole vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2020-14863 CVE-2020-24275 · GHSA-v8cm-m69f-m8pg

HIGH 68

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0077 Published 2023-07-20 No fix listed CWE-74

TI-2026-20013 CVE-2026-24814 · GHSA-2rr6-9w84-3v7p

MEDIUM 49

Integer Overflow or Wraparound vulnerability in swoole swoole-src (thirdparty/hiredis modules).

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.003 Published 2026-01-27 Fixed CWE-190

TI-2021-19512 CVE-2021-43676 · GHSA-mh9j-v6mq-pfch

MEDIUM 45

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01426 Published 2021-12-03 Fixed in 3.0.6 CWE-22

TI-2018-11057 CVE-2018-15503 · GHSA-wp68-99q2-jm6p

LOW 37

The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02272 Published 2018-08-18 No fix listed CWE-502

TI-2019-11618 CVE-2019-15518 · GHSA-2v28-fx5v-7xvj

LOW 28

Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02019 Published 2019-08-23 No fix listed CWE-22