High severity7.5NVD Advisory· Published Jul 9, 2021· Updated Jun 17, 2026
CVE-2021-32742
CVE-2021-32742
Description
Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.init(base32Encoded:) function opens up the potential for exposing server memory and/or crashing the server (Denial of Service) for applications where untrusted data can end up in said function. Vapor does not currently use this function itself so this only impact applications that use the impacted function directly or through other dependencies. The vulnerability is patched in version 4.47.2. As a workaround, one may use an alternative to Vapor's built-in Data.init(base32Encoded:).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/vapor/vaporSwiftURL | < 4.47.2 | 4.47.2 |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-pqwh-c2f3-vxmqghsaADVISORY
- github.com/vapor/vapor/releases/tag/4.47.2nvdRelease NotesThird Party AdvisoryWEB
- github.com/vapor/vapor/security/advisories/GHSA-pqwh-c2f3-vxmqnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-32742ghsaADVISORY
News mentions
0No linked articles in our index yet.