24 matches found
Pulse
Pulse is a powerful logging system for Apple Platforms. Native. Built with SwiftUI. Record and inspect logs and URLSession network requests right from your iOS app. Share logs and view them in Pulse Pro or use remote logging to see them in real time. Logs are stored locally and never leave your...
CVE-2026-63651
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...
CVE-2026-63651
Prior to version 0.7.0 , LiveDocs is vulnerable to a Server-Side Request Forgery (SSRF) via its fetch_docs and introspect functions. The software passes client-supplied URLs to URLSession without any scheme or host allowlist and follows redirects unconditionally. An attacker can use a prompt-inje...
CVE-2026-63651 LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...
CVE-2026-63651: PsychQuant livedocs: LiveDocs is a primary-source-first documentation for AI agents
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...
PT-2026-141805
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch docs and introspect kinds openapi/graphql, and resolve source's docs url pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...
EUVD-2019-18180
Malware in sbrugna...
CVE-2022-3918
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
Crlf injection
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
CVE-2022-3918
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
CVE-2022-3918
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
CVE-2022-3918: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
CVE-2022-3918
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...
CVE-2022-3918
CVE-2022-3918 involves Swift’s FoundationNetworking (swift-corelibs-foundation). A CRLF injection flaw in URLRequest headers allows a client to insert CRLF sequences into a header value, which may cause the server to parse extra headers or a second request when sent via URLSession. The vulnerabil...
CVE-2019-8790
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...
CVE-2019-8790
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...
CVE-2019-8790
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...
CVE-2019-8790
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...
CVE-2019-8790
CVE-2019-8790 involves incorrect management of file descriptors in URLSession within Apple Swift Foundation on Ubuntu, which could lead to inadvertent data disclosure. Connected sources confirm the issue affects Swift’s URLSession handling and was addressed by aligning the file descriptor logic t...
CVE-2019-8790: Insecure Storage of Sensitive Information
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...