Apple Swiftnio Http/2 — known CVE vulnerabilities

Every CVE whose affected-product data names Apple Swiftnio Http/2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-0618 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2…
• CVE-2022-24666 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2…
• CVE-2022-24667 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted…
• CVE-2022-24668 — CVSS 7.5 (high): A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2026-28898 — CVSS 5.3 (medium): swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the…