Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-43678

An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dro

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple swift-nio

  • 0 to < 2.101.0affected

References