CVE-2026-28898 | Apple swift-nio-http2 up to 1.44.0 Header Validation escape output (GHSA-4px2-pw77-vc85)

A vulnerability was found in Apple swift-nio-http2 up to 1.44.0 and classified as critical. This vulnerability affects unknown code of the component Header Validation Handler. Executing a manipulation can lead to escaping of output.

The identification of this vulnerability is CVE-2026-28898. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.