npm package report

Is github.com/apple/swift-nio safe?

1 known vulnerability.

cvss

not scored

how bad it is if exploited, out of 10

epss

not scored

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-mgc4-wqv7-4pxm, the advisory selected below

// advisories

GHSA-mgc4-wqv7-4pxm

UNKNOWN

Affected SwiftNIO systems are vulnerable to request smuggling attacks, in which they parse a given HTTP message differently from other network parties, potentially seeing a different number of requests than other servers. This can lead to failures of authentication, routing, and other issues.

Affected: >=1.0.0, <1.14.2, >=2.0.0, <2.13.1
Fixed in: not stated
Weakness: CWE-444
Published: 2023-05-18
Source: osv

OSV

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.

Checked 2026-09-22 at 01:43 UTC. The most recent advisory here was published 2023-05-18. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is github.com/apple/swift-nio safe? npm package security report | CyberXYZ