Beveiligingsadvies

CVE-2026-64785

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-23 18:50:40

Laatst bijgewerkt 2026-07-24 20:06:58

Toegewezen door apple

CVSS-score 5.3

Status PUBLISHED

Beschrijving

SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. This vulnerability is addressed in swift-nio-http2 version 1.45.0.

← Alle CVE's bekijken Bekijk op cve.org ↗