Orta CVSS 5.3
CVE-2026-43678: Swiftnio: hatalı girdi doğrulama
Açıklama (NVD)
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.
Özet bilgiler
- Ürün
- Apple Swiftnio
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - EPSS
- %0,37 (yüzdelik 32)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apple-swiftnio | — | — | 2.101.0 |