{ "schemaVersion": 1, "site": "https://cveboard.org", "generatedAt": "2026-10-23T19:17:19.292Z", "lastRun": "2026-10-23T19:01:02.861Z", "liveDays": 14, "filters": { "kind": null, "exploited": false, "severity": null, "ecosystems": [], "tag": "swift" }, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "incidents": [ { "id": "cve-2026-103922", "url": "https://cveboard.org/i/cve-2026-103922", "urlPt": "https://cveboard.org/pt/i/cve-2026-103922", "json": "https://cveboard.org/i/cve-2026-103922.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path", "summary": "Capacitor's WebView navigation guard validated only the host and scheme of a target URL, not its path. Because the internal HTTP proxy path (/_capacitor_http_interceptor_) is served at the application's own origin, a frame navigation to it was always treated as in-app navigation and allowed.", "titlePt": "Capacitor Android e iOS: conteúdo remoto pode ser carregado na origem do app via o caminho do proxy HTTP interno", "summaryPt": "O guardião de navegação do WebView do Capacitor validava apenas o host e o esquema de uma URL de destino, não seu caminho. Como o caminho do proxy HTTP interno (/_capacitor_http_interceptor_) é servido na origem do próprio aplicativo, uma navegação de frame para ele era sempre tratada como navegação dentro do app e permitida.", "affected": [ { "vendor": "ionic-team", "product": "capacitor", "defaultStatus": "unknown", "versions": [ { "version": ">= 6.0.0, < 6.2.2", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 7.0.0, < 7.6.9", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.0.0, < 8.3.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.3.5, < 8.4.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.5.0, < 8.5.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "@capacitor", "product": "android", "defaultStatus": "unknown", "versions": [ { "version": ">= 8.5.0, < 8.5.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.3.5, < 8.4.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.0.0, < 8.3.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 7.0.0, < 7.6.9", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 6.0.0, < 6.2.2", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "@capacitor", "product": "ios", "defaultStatus": "unknown", "versions": [ { "version": ">= 8.5.0, < 8.5.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.3.5, < 8.4.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.0.0, < 8.3.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 7.0.0, < 7.6.9", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 6.0.0, < 6.2.2", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "com.capacitorjs", "product": "core", "defaultStatus": "unknown", "versions": [ { "version": ">= 8.5.0, < 8.5.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.3.5, < 8.4.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.0.0, < 8.3.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 7.0.0, < 7.6.9", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 6.0.0, < 6.2.2", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] }, { "vendor": "swift", "product": "github.com/ionic-team/capacitor-swift-pm", "defaultStatus": "unknown", "versions": [ { "version": ">= 8.5.0, < 8.5.1", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.3.5, < 8.4.3", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 8.0.0, < 8.3.5", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 7.0.0, < 7.6.9", "status": "affected", "lessThan": null, "lessThanOrEqual": null }, { "version": ">= 6.0.0, < 6.2.2", "status": "affected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [] } ], "omitted": 0, "references": [], "cwes": [ { "id": "CWE-346", "name": "Origin Validation Error" }, { "id": "CWE-441", "name": "Unintended Proxy or Intermediary ('Confused Deputy')" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-10-01T18:01:35.925Z" }, "fix": "listed", "tags": [ "ionic-team", "npm", "swift", "maven" ], "cves": [ "CVE-2026-103922" ], "ghsa": "GHSA-rvm3-566m-v7fv", "cvss": { "score": 9.3, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00213, "percentile": 0.11025, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "@capacitor/android", "vulnerable": ">= 6.0.0, < 6.2.2", "fixed": "6.2.2", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/android", "vulnerable": ">= 7.0.0, < 7.6.9", "fixed": "7.6.9", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/ios", "vulnerable": ">= 6.0.0, < 6.2.2", "fixed": "6.2.2", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/ios", "vulnerable": ">= 7.0.0, < 7.6.9", "fixed": "7.6.9", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "swift", "name": "github.com/ionic-team/capacitor-swift-pm", "vulnerable": ">= 6.0.0, < 6.2.2", "fixed": "6.2.2", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "swift", "name": "github.com/ionic-team/capacitor-swift-pm", "vulnerable": ">= 7.0.0, < 7.6.9", "fixed": "7.6.9", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "maven", "name": "com.capacitorjs:core", "vulnerable": ">= 6.0.0, < 6.2.2", "fixed": "6.2.2", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "maven", "name": "com.capacitorjs:core", "vulnerable": ">= 7.0.0, < 7.6.9", "fixed": "7.6.9", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/android", "vulnerable": ">= 8.5.0, < 8.5.1", "fixed": "8.5.1", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/ios", "vulnerable": ">= 8.5.0, < 8.5.1", "fixed": "8.5.1", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "swift", "name": "github.com/ionic-team/capacitor-swift-pm", "vulnerable": ">= 8.5.0, < 8.5.1", "fixed": "8.5.1", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "maven", "name": "com.capacitorjs:core", "vulnerable": ">= 8.5.0, < 8.5.1", "fixed": "8.5.1", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "maven", "name": "com.capacitorjs:core", "vulnerable": ">= 8.3.5, < 8.4.3", "fixed": "8.4.3", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/android", "vulnerable": ">= 8.3.5, < 8.4.3", "fixed": "8.4.3", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/ios", "vulnerable": ">= 8.3.5, < 8.4.3", "fixed": "8.4.3", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "swift", "name": "github.com/ionic-team/capacitor-swift-pm", "vulnerable": ">= 8.3.5, < 8.4.3", "fixed": "8.4.3", "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "swift", "name": "github.com/ionic-team/capacitor-swift-pm", "vulnerable": ">= 8.0.0, <= 8.3.4", "fixed": null, "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "maven", "name": "com.capacitorjs:core", "vulnerable": ">= 8.0.0, <= 8.3.4", "fixed": null, "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/android", "vulnerable": ">= 8.0.0, <= 8.3.4", "fixed": null, "advisory": "GHSA-rvm3-566m-v7fv" }, { "ecosystem": "npm", "name": "@capacitor/ios", "vulnerable": ">= 8.0.0, <= 8.3.4", "fixed": null, "advisory": "GHSA-rvm3-566m-v7fv" } ], "vendor": "ionic-team", "product": "capacitor", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-rvm3-566m-v7fv" } ], "publishedAt": "2026-10-05T22:53:10.000Z", "updatedAt": "2026-10-05T22:53:10.000Z" } ], "tag": { "tag": "swift", "name": "Swift", "kev": null } }