Product

swifturl github.com/swift-server/async-http-client vulnerabilities

1 published CVE affecting swifturl github.com/swift-server/async-http-client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest swifturl github.com/swift-server/async-http-client CVEs

Newest publication first

CVE-2023-0040 Async HTTP Client has CRLF Injection vulnerability in HTTP request headers
Published 2023-01-18

HighCVSS 7.5

Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network. Users are vulnerable if they...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

swifturl github.com/swift-server/async-http-client vulnerabilities

Latest swifturl github.com/swift-server/async-http-client CVEs

CVE-2023-0040 Async HTTP Client has CRLF Injection vulnerability in HTTP request headers