Vulnerability CVE-2022-31005


Published: 2022-05-31

Description:
Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, disable FileMiddleware and serve via a Content Delivery Network.

Type:

CWE-190

(Integer Overflow or Wraparound)

 References:
https://github.com/vapor/vapor/security/advisories/GHSA-vj2m-9f5j-mpr5
https://github.com/vapor/vapor/commit/953a349b539b3e0d3653585c8ffb50c427986df1
https://github.com/vapor/vapor/releases/tag/4.60.3

Copyright 2026, cxsecurity.com

 

Back to Top