CyberSecBulletin

Vapor vulnerabilities

We track 2 vulnerabilities in Vapor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Vapor vulnerabilities

  • 7.5 High severity

    vapor: Uncontrolled Recursion

    CVE-2022-31019VaporEPSS 1.66%

    Vapor is a server-side Swift HTTP web framework. When using automatic content decoding an attacker can craft a request body that can make the server crash with the following request: `curl -d "array[_0][0][array][_0][0][array]$(for f in $(seq 1100); do echo -n

  • 7.5 High severity

    vapor: Integer Overflow or Wraparound

    CVE-2022-31005VaporEPSS 2.11%

    Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, di