| Package | Affected versions | Patched versions |
|---|---|---|
| swiftnio | < 2.101.0 | 2.101.0 |
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free