Vapor Project Vapor
3 CVEs affecting Vapor Project Vapor. Latest disclosed: 2021-07-09. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15230 | High | 8.5 | 2020-10-02 | Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application… |
CVE-2021-32742 | High | 7.5 | 2021-07-09 | Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server me… |
CVE-2021-21328 | Medium | 5.3 | 2021-02-26 | Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app… |