TI-2026-22762 CVE-2026-28499 · GHSA-6jj5-j4j8-8473
LeafKit's HTML escaping may be skipped for Collection values, enabling XSS
Priority HIGH 70
LeafKit is a templating language with Swift-inspired syntax.
Vulnerabilities
11 records
TI-2026-21572 CVE-2026-27120 · GHSA-4hfh-fch3-5q7p
Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster
Priority MEDIUM 60
Leafkit is a templating language with Swift-inspired syntax.
TI-2024-14356 CVE-2024-21631 · GHSA-r6r4-5pr8-gjcp
Integer overflow in URI leading to potential host spoofing
Priority LOW 36
Vapor is an HTTP web framework for Swift.
TI-2023-23892 CVE-2023-44386 · GHSA-3mwq-h3g6-ffhm
Incorrect request error handling triggers server crash in Vapor
Priority LOW 31
Vapor is an HTTP web framework for Swift.
TI-2023-14846 CVE-2023-31136 · GHSA-9cfh-vx93-84vv
PostgresNIO processes unencrypted bytes from man-in-the-middle
Priority LOW 27
PostgresNIO is a Swift client for PostgreSQL.
TI-2022-13064 CVE-2022-31019 · GHSA-qvxg-wjxc-r4gg
DoS Vulnerability in URLEncodedFormDecoder in Vapor
Priority HIGH 72
Vapor is a server-side Swift HTTP web framework.
TI-2022-13051 CVE-2022-31005 · GHSA-vj2m-9f5j-mpr5
Integer Overflow in Vapor's HTTP Range Request
Priority HIGH 72
Vapor is an HTTP web framework for Swift.
TI-2021-15509 CVE-2021-37634 · GHSA-rv3x-xq3r-8j9h
LeafKit allows XSS with untrusted user input
Priority LOW 34
Leafkit is a templating language with Swift-inspired syntax.
TI-2021-12410 CVE-2021-32742 · GHSA-pqwh-c2f3-vxmq
Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash
Priority MEDIUM 42
Vapor is a web framework for Swift.
TI-2021-04428 CVE-2021-21328 · GHSA-gcj9-jj38-hwmc
Denial of service in vapor
Priority LOW 28
Vapor is a web framework for Swift.
TI-2020-12002 CVE-2020-15230 · GHSA-vcvg-xgr8-p5gq
Arbitrary file read un Vapor
Priority MEDIUM 40
Vapor is a web framework for Swift.