github.com/apple/swift-nio-http2 vulnerabilities

CVEs whose affected-version data names the github.com/apple/swift-nio-http2 package (swift). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-28898Low

SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

▾ Sunlitapple · github.com/apple/swift-nio-http2EPSS 0.31%via GHSA

github.com/apple/swift-nio-http2 vulnerabilities (CVEs) · VulnSea