Vulnerabilities in vapor

11 results

CVE-2022-31005HIGHInteger Overflow in Vapor's HTTP Range RequestEPSS 1.9%CVE-2021-21328MEDIUMDenial of ServiceEPSS 1.6%CVE-2020-15230HIGHArbitrary file read un VaporEPSS 1.5%CVE-2022-31019HIGHDoS Vulnerability in URLEncodedFormDecoder in VaporEPSS 1.5%CVE-2021-32742HIGHUntrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crashEPSS 1.2%CVE-2021-37634HIGHLeafKit allows XSS with untrusted user inputEPSS 0.7%CVE-2024-21631MEDIUMInteger overflow in URI leading to potential host spoofingEPSS 0.6%CVE-2023-44386MEDIUMIncorrect request error handling triggers server crash in VaporEPSS 0.6%CVE-2023-31136LOWPostgresNIO processes unencrypted bytes from man-in-the-middleEPSS 0.5%CVE-2026-28499MEDIUMLeafKit's HTML escaping may be skipped for Collection values, enabling XSSEPSS 0.3%CVE-2026-27120MEDIUMLeaf-kit html escaping does not work on characters that are part of extended grapheme clusterEPSS 0.2%