vapor vulnerabilities and fixes

Recent CVEs affecting vapor, with upgrade or downgrade steps. 7 tracked.

vapor has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-01-03. Highest priority: CVE-2022-31005 (score 57/100).

• CVE-2024-21631 MEDIUM 6.5 UPGRADE Vapor is an HTTP web framework for Swift
• CVE-2023-44386 MEDIUM 5.3 UPGRADE Vapor is an HTTP web framework for Swift
• CVE-2022-31019 HIGH 7.5 UPGRADE Vapor is a server-side Swift HTTP web framework
• CVE-2022-31005 HIGH 7.5 UPGRADE Vapor is an HTTP web framework for Swift
• CVE-2021-32742 HIGH 7.5 UPGRADE Vapor is a web framework for Swift
• CVE-2021-21328 MEDIUM 5.3 UPGRADE Vapor is a web framework for Swift
• CVE-2020-15230 HIGH 8.5 UPGRADE Vapor is a web framework for Swift

FAQ

How do I fix vapor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is vapor being exploited right now?

None of the tracked vapor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which vapor CVE should I patch first?

CVE-2022-31005 currently ranks highest (57/100): Vapor is an HTTP web framework for Swift.

RSS feed for vapor · ← Back to latest CVEs