Critical Swift package vulnerabilities
The Beam CVE database tracks 6 critical package advisories for Swift: 6 critical severity. The newest is CVE-2026-103922, published Oct 5, 2026 and fixed in 6.2.2, 7.6.9.
Critical-severity advisories for Swift packages from the GitHub Advisory Database, published since 2024. AI coding agents install packages on their own, so a vulnerable or malicious dependency can reach a project without a human picking it. Advisories for AI tools themselves are listed under each tool.
- Vulnerabilities tracked
- 6
- Critical
- 6
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-103922 · npm
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
critical9.3No fixOct 5, 2026CVE-2025-30404 · PyPI
ExecuTorch integer overflow vulnerability
critical9.8Aug 8, 2025CVE-2025-30405 · PyPI
ExecuTorch integer overflow vulnerability
critical9.8Aug 8, 2025CVE-2025-54949 · PyPI
ExecuTorch heap buffer overflow vulnerability
critical9.8Aug 8, 2025CVE-2025-54950 · PyPI
ExecuTorch out-of-bounds access vulnerability
critical9.8Aug 8, 2025CVE-2025-54951 · PyPI
ExecuTorch vulnerable to Heap-based Buffer Overflow
critical9.8Aug 8, 2025