← Back

Swoole

swoole

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Swoole
swoole
3 CVEs
Swoole Php Framework
swoole_php_framework
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-24275
1Swoole
1Swoole
Jun 17, 2026
Jul 20, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.
CVE-2021-43676
1Swoole
1Swoole Php Framework
Jun 17, 2026
Dec 3, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.
CVE-2019-15518
1Swoole
1Swoole
Jun 17, 2026
Aug 23, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.
CVE-2018-15503
1Swoole
1Swoole
Nov 21, 2024
Aug 18, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process. An attacker can craft a serialized object to exploit this vulnerability and cause a SEGV.