Security: apple/swift-nio-http2
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1CodecGHSA-4px2-pw77-vc85 published
May 21, 2026 by LukasaLow -
HTTP/2 MadeYouReset vulnerabilityGHSA-xvr7-p2c6-j83w published
Aug 13, 2025 by LukasaLow -
HTTP/2 Stream Cancellation AttackGHSA-qppj-fm5r-hxr3 published
Oct 10, 2023 by LukasaModerate -
CVE-2022-0618: Denial of service via HTTP/2 HEADERS frames paddingGHSA-q36x-r5x4-h4q6 published
Mar 10, 2022 by LukasaHigh -
CVE-2022-24668: Denial of service via ALTSVC or ORIGIN framesGHSA-pgfx-g6rc-8cjv published
Feb 11, 2022 by LukasaHigh -
CVE-2022-24667: Denial of service via mishandled HPACK variable length integer encodingGHSA-w3f6-pc54-gfw7 published
Feb 11, 2022 by LukasaHigh -
CVE-2022-24666: Denial of service via invalid HTTP/2 HEADERS frame lengthGHSA-ccw9-q5h2-8c2w published
Feb 11, 2022 by LukasaHigh -
CVE-2019-9518: Empty DATA frame floodingGHSA-crcg-r874-885f published
Aug 13, 2019 by LukasaHigh -
CVE-2019-9516: 0-length HEADERS memory leakGHSA-9cqv-v2w2-7j52 published
Aug 13, 2019 by LukasaHigh -
CVE-2019-9515: Settings floodGHSA-hv27-vjg3-m59x published
Aug 13, 2019 by LukasaHigh