https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:13:01.370951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-232704 EUVD-2026-232704 2026-10-03T03:13:01.443955+00:00 EUVD-2026-232704 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31005 fkie_cve-2022-31005 2026-10-03T03:13:01.443995+00:00

Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, disable FileMiddleware and serve via a Content Delivery Network.

 https://cve.radiocsirt.org/vuln/ghsa-vj2m-9f5j-mpr5 GHSA-vj2m-9f5j-mpr5 — Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware 2026-10-03T03:13:01.444029+00:00

Affected: SwiftURL: github.com/vapor/vapor

Vapor is an HTTP web framework for Swift and [middleware](https://docs.vapor.codes/advanced/middleware/) is a logic chain between the client and a Vapor route handler. [FileMiddleware](https://docs.vapor.codes/advanced/middleware/#file-middleware) enables the serving of assets from the Public folder of a project to the client.

Vapor before 4.60.3 is vulnerable to denial of service due to an integer overflow when given invalid range headers while using FileMiddleware. This is patched in 4.60.3.

 https://cve.radiocsirt.org/vuln/gsd-2022-31005 gsd-2022-31005 2026-10-03T03:13:01.444057+00:00 gsd-2022-31005