CVE-2022-31005 Information

Description

Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround disable FileMiddleware and serve via a Content Delivery Network.

Reference

https://github.com/vapor/vapor/security/advisories/GHSA-vj2m-9f5j-mpr5 https://github.com/vapor/vapor/commit/953a349b539b3e0d3653585c8ffb50c427986df1 https://github.com/vapor/vapor/releases/tag/4.60.3