https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:44:44.418187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-64943 cnvd-2020-64943 2026-10-03T02:44:44.483682+00:00 cnvd-2020-64943 https://cve.radiocsirt.org/vuln/euvd-2026-42742 EUVD-2026-42742 2026-10-03T02:44:44.483748+00:00 EUVD-2026-42742 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15230 fkie_cve-2020-15230 2026-10-03T02:44:44.483763+00:00

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.

 https://cve.radiocsirt.org/vuln/ghsa-vcvg-xgr8-p5gq GHSA-vcvg-xgr8-p5gq — Arbitrary file read using percent-encoded relative paths in FileMiddleware 2026-10-03T02:44:44.483796+00:00

Affected: SwiftURL: github.com/vapor/vapor

### Impact

Attackers can access data at arbitrary filesystem paths on the same host as an application using `FileMiddleware`.

### Patches

Version [4.29.4](https://github.com/vapor/vapor/releases/tag/4.29.4)

### Workarounds

Upgrade to 4.24.4 or later, or disable `FileMiddleware`.

### References

* Introduced in https://github.com/vapor/vapor/pull/2223 * Fixed by https://github.com/vapor/vapor/pull/2500

### For more information

If you have any questions or comments about this advisory: * Open [an issue](https://github.com/vapor/vapor/issues) * Email us at [security@vapor.codes](mailto:security@vapor.codes)

 https://cve.radiocsirt.org/vuln/gsd-2020-15230 gsd-2020-15230 2026-10-03T02:44:44.483889+00:00 gsd-2020-15230