Medium severity5.3NVD Advisory· Published Aug 20, 2026· Updated Aug 20, 2026

CVE-2026-43678

Description

An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.

Affected products

Apple Inc./Containerllm-fuzzy
Range: >=2.101.0

Patches

Vulnerability mechanics

References

github.com/apple/container/security/advisories/GHSA-2v2q-4q35-h585nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000