vapor

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

vapor records in CISA KEV

No vapor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vapor 4 records HIGH Leafkit 3 records HIGH Postgresnio 1 record LOW

Records

11 records

TI-2022-13064 CVE-2022-31019 · GHSA-qvxg-wjxc-r4gg

DoS Vulnerability in URLEncodedFormDecoder in Vapor

HIGH 72

Vapor is a server-side Swift HTTP web framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01663 Published 2022-06-06 Fixed in 4.61.1 CWE-120

TI-2022-13051 CVE-2022-31005 · GHSA-vj2m-9f5j-mpr5

Integer Overflow in Vapor's HTTP Range Request

HIGH 72

Vapor is an HTTP web framework for Swift.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02108 Published 2022-05-31 Fixed in 4.60.3 CWE-190

TI-2026-22762 CVE-2026-28499 · GHSA-6jj5-j4j8-8473

LeafKit's HTML escaping may be skipped for Collection values, enabling XSS

HIGH 70

LeafKit is a templating language with Swift-inspired syntax.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00281 Published 2026-03-18 Fixed in 1.14.2 CWE-116

TI-2026-21572 CVE-2026-27120 · GHSA-4hfh-fch3-5q7p

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

MEDIUM 60

Leafkit is a templating language with Swift-inspired syntax.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2026-02-20 Fixed in 1.4.1 CWE-75

TI-2021-12410 CVE-2021-32742 · GHSA-pqwh-c2f3-vxmq

Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash

MEDIUM 42

Vapor is a web framework for Swift.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01199 Published 2021-07-09 Fixed in 4.47.2 CWE-502

TI-2020-12002 CVE-2020-15230 · GHSA-vcvg-xgr8-p5gq

Arbitrary file read un Vapor

MEDIUM 40

Vapor is a web framework for Swift.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0153 Published 2020-10-02 Fixed in 4.29.4 CWE-22

TI-2024-14356 CVE-2024-21631 · GHSA-r6r4-5pr8-gjcp

Integer overflow in URI leading to potential host spoofing

LOW 36

Vapor is an HTTP web framework for Swift.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00601 Published 2024-01-03 Fixed in 4.90.0 CWE-1104

TI-2021-15509 CVE-2021-37634 · GHSA-rv3x-xq3r-8j9h

LeafKit allows XSS with untrusted user input

LOW 34

Leafkit is a templating language with Swift-inspired syntax.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.0071 Published 2021-08-09 Fixed in 1.3.0 CWE-79

TI-2023-23892 CVE-2023-44386 · GHSA-3mwq-h3g6-ffhm

Incorrect request error handling triggers server crash in Vapor

LOW 31

Vapor is an HTTP web framework for Swift.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00736 Published 2023-10-05 Fixed in 4.84.2 CWE-231

TI-2021-04428 CVE-2021-21328 · GHSA-gcj9-jj38-hwmc

Denial of service in vapor

LOW 28

Vapor is a web framework for Swift.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01837 Published 2021-02-26 Fixed in 4.40.1 CWE-400

TI-2023-14846 CVE-2023-31136 · GHSA-9cfh-vx93-84vv

PostgresNIO processes unencrypted bytes from man-in-the-middle

LOW 27

PostgresNIO is a Swift client for PostgreSQL.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0049 Published 2023-05-09 Fixed in 1.14.2 CWE-522

Open these records in search →

Critical	1
High	4
Medium	6
Low	0
No CVSS	0