Vulnerabilidades en vapor
11 resultadosAnálisis Vexday
A Vapor apresenta 11 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou classificada como crítica, com foco predominante em falhas de validação (CWE-79). O risco está estabilizado, sem novos descobrimentos nos últimos 90 dias, indicando paisagem de segurança madura e sem pressão imediata de remediação.
CVE-2022-31005HIGHInteger Overflow in Vapor's HTTP Range RequestEPSS 2.0%CVE-2021-21328MEDIUMDenial of ServiceEPSS 1.7%CVE-2022-31019HIGHDoS Vulnerability in URLEncodedFormDecoder in VaporEPSS 1.6%CVE-2020-15230HIGHArbitrary file read un VaporEPSS 1.5%CVE-2021-32742HIGHUntrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crashEPSS 1.2%CVE-2021-37634HIGHLeafKit allows XSS with untrusted user inputEPSS 0.7%CVE-2024-21631MEDIUMInteger overflow in URI leading to potential host spoofingEPSS 0.6%CVE-2023-44386MEDIUMIncorrect request error handling triggers server crash in VaporEPSS 0.6%CVE-2023-31136LOWPostgresNIO processes unencrypted bytes from man-in-the-middleEPSS 0.5%CVE-2026-28499MEDIUMLeafKit's HTML escaping may be skipped for Collection values, enabling XSSEPSS 0.3%CVE-2026-27120MEDIUMLeaf-kit html escaping does not work on characters that are part of extended grapheme clusterEPSS 0.2%