`github.com/vapor/vapor`

Ecosystem:
swift

Package URL:
pkg:swift/github.com/vapor/vapor

Total PRs:
15 Dependabot PRs

Latest PR:
3 months ago

Unique Repositories:
9 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Vapor contains an integer overflow in URI leading to potential host spoofing

GHSA-r6r4-5pr8-gjcp CVE-2024-21631 MODERATE published over 2 years ago • updated 39 minutes ago

Vapor's `vapor_urlparser_parse` function uses `uint16_t` indexes when parsing a URI's components, which may cause integer overflows when parsing un...

Vapor's incorrect request error handling triggers server crash

GHSA-3mwq-h3g6-ffhm CVE-2023-44386 MODERATE published almost 3 years ago • updated 18 days ago

Vapor incorrectly handles errors encountered during parsing of HTTP 1.x requests, triggering a precondition failure in swift-nio due to API misuse ...

Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash

GHSA-pqwh-c2f3-vxmq CVE-2021-32742 MODERATE published about 3 years ago • updated 21 days ago

### Impact A bug in the `Data.init(base32Encoded:)` function opens up the potential for exposing server memory and/or crashing the server (Denial o...

Vapor's Metrics integration could cause a system drain

GHSA-gcj9-jj38-hwmc CVE-2021-21328 MODERATE published about 3 years ago • updated 21 days ago

### Impact This is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app with the following attack vector: 1. send unli...

Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware

GHSA-vj2m-9f5j-mpr5 CVE-2022-31005 HIGH published about 3 years ago • updated 21 days ago

Vapor is an HTTP web framework for Swift and [middleware](https://docs.vapor.codes/advanced/middleware/) is a logic chain between the client and a ...

View all 7 advisories

Recent PRs

Bump the dependencies group with 22 updates

Keornavil/DrinkAPI #8

4.121.1 → 4.121.4 Patch PR

Open 3 months ago 15 comments

Bump the dependencies group across 1 directory with 19 updates

Keornavil/DrinkAPI #7

4.121.1 → 4.121.3 Patch PR

Open 4 months ago 9 comments

fix: bump the swift-dependencies group across 1 directory with 15 updates

ziad283/open-meteo-Algeria #5

4.121.0 → 4.121.2 Patch PR

Closed 5 months ago 1 comment

fix: bump the swift-dependencies group across 1 directory with 11 updates

ziad283/open-meteo-Algeria #4

4.121.0 → 4.121.2 Patch PR

Closed 5 months ago 1 comment

Bump github.com/vapor/vapor from 4.121.0 to 4.121.1

sersoft-gmbh/route-docs #231

4.121.0 → 4.121.1 Patch PR

Open 6 months ago 1 comment

Bump github.com/vapor/vapor from 4.67.4 to 4.120.0

randhircs/swift-dependabotscan-test3 #21

4.67.4 → 4.120.0 Minor PR

Closed 7 months ago 1 comment

chore(deps): bump github.com/vapor/vapor from 4.115.0 to 4.119.2

Yaxinnnnnn/swift-mlx-server #5

4.115.0 → 4.119.2 Minor PR

Closed 8 months ago 1 comment

Bump github.com/vapor/vapor from 4.119.0 to 4.119.1

sersoft-gmbh/swift-smtp #149

4.119.0 → 4.119.1 Patch PR

Open 8 months ago 1 comment

chore(deps): bump github.com/vapor/vapor from 4.115.0 to 4.119.1

Yaxinnnnnn/swift-mlx-server #4

4.115.0 → 4.119.1 Minor PR

Closed 8 months ago 1 comment

fix: bump github.com/vapor/vapor from 4.119.0 to 4.119.1 in the swift-dependencies group

open-meteo/open-meteo #1572

4.119.0 → 4.119.1 Patch PR

Open 8 months ago 2 comments

swift(deps): bump github.com/vapor/vapor from 4.115.1 to 4.118.0

jondwillis/swiftralino #28

4.115.1 → 4.118.0 Minor PR

Open 8 months ago 1 comment

Bump github.com/vapor/vapor from 4.114.1 to 4.117.2

MegaMek/api-data #18

4.114.1 → 4.117.2 Minor PR

Closed 8 months ago 1 comment

fix: bump the swift-dependencies group with 4 updates

open-meteo/open-meteo #1505

4.115.1 → 4.117.0 Minor PR

Merged 10 months ago

swift(deps): bump github.com/vapor/vapor from 4.115.1 to 4.117.0

jondwillis/swiftralino #17

4.115.1 → 4.117.0 Minor PR

Closed 10 months ago 2 comments

Bump github.com/vapor/vapor from 4.67.4 to 4.117.0

randhircs/swift-dependabotscan-test3 #15

4.67.4 → 4.117.0 Minor PR

Closed 10 months ago 1 comment

Package Details

Name:	`github.com/vapor/vapor`
Ecosystem:	swift
PURL Type:	swift
Package URL:	`pkg:swift/github.com/vapor/vapor`
JSON API:	View JSON

Security Advisories

7

Active advisories

HIGH 2

MODERATE 5

View All swift Advisories

Package Information

Description:

💧 A server-side Swift HTTP web framework.

Repository:	https://github.com/vapor/vapor
Homepage:	https://vapor.codes
Latest Release:	`4.106.7` over 1 year ago
Dependent Repos:	796
Dependent Packages:	122
Ranking:	Top 0.2034% by dependent repos Top 0.1099% by dependent pkgs

PR Status

Open 6 (40.0%)

Merged 1 (6.7%)

Closed 8 (53.3%)

PR Types

Minor 8 (53.3%)

Patch 7 (46.7%)