# SwiftURL


- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2025-30404](https://insights.sbomify.com/CVE-2025-30404/): ExecuTorch integer overflow vulnerability (critical 9.8)
- [CVE-2025-30405](https://insights.sbomify.com/CVE-2025-30405/): ExecuTorch integer overflow vulnerability (critical 9.8)
- [CVE-2025-54949](https://insights.sbomify.com/CVE-2025-54949/): ExecuTorch heap buffer overflow vulnerability (critical 9.8)
- [CVE-2025-54950](https://insights.sbomify.com/CVE-2025-54950/): ExecuTorch out-of-bounds access vulnerability (critical 9.8)
- [CVE-2025-54951](https://insights.sbomify.com/CVE-2025-54951/): ExecuTorch vulnerable to Heap-based Buffer Overflow (critical 9.8)
- [CVE-2019-8849](https://insights.sbomify.com/CVE-2019-8849/): SwiftNIO SSL arbitrary code execution vulnerability (critical 9.8)
- [CVE-2026-103922](https://insights.sbomify.com/CVE-2026-103922/): Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path (critical 9.3)
- [CVE-2024-25713](https://insights.sbomify.com/CVE-2024-25713/): yyjson has a Double Free vulnerability (high 8.6)
- [CVE-2020-15230](https://insights.sbomify.com/CVE-2020-15230/): Arbitrary file read un Vapor (high 8.5)
- [CVE-2024-27529](https://insights.sbomify.com/CVE-2024-27529/): wasm3 uncontrolled memory allocation vulnerability (high 8.4)
- [CVE-2025-30402](https://insights.sbomify.com/CVE-2025-30402/): ExecuTorch vulnerable to Heap-based Buffer Overflow attack (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/ecosystems/swifturl/