Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service
CVE-2026-61695
### Summary Wire's Swift runtime (`Wire` SPM/CocoaPods product, implemented by `wire-runtime-swift`) did not reject a n
#swift
共收录 5 条相关情报。
← 返回所有主题swift-nio-http2: Missing CR/LF/NUL validation in header values
CVE-2026-64785
## Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
CVE-2026-47122
## Summary AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data i
Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta
CVE-2026-47121
## Summary Binary delta apply intermediate-symlink traversal in malicious .delta `Autoupdate/SUBinaryDeltaApply.m` enf
container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command
#### Product Name: container Github Link: https://github.com/apple/container Version: `**: exactly one rule is writte