Skip to content
All authors
Tim

Tim

@0xTim

Vapor Core Team and collector of Swift Workgroups.

How we approach releases at Vapor

See how we approach releases in Vapor, so we can release quickly and often to save time and provide a better experience for users and contributors.

Embracing the Ecosystem

Embracing more parts of the Swift on Server ecosystem as we progress towards Vapor 5

The Future of Vapor

After nearly 400 releases, we're now looking to what comes after Vapor 4. With Swift 6 on the horizon, here's our thinking on Vapor 5 and the framework's future

JWTKit is no longer Boring!

JWTKit is the first Vapor package rebuilt around Swift's structured concurrency ahead of Swift 6. Here's what's new in this major release.

Vapor URI Parsing Security Vulnerability

Vapor 4.90.0 fixes CVE-2024-21631 in URI parsing, replacing the old C parser with a safer Swift implementation. Upgrade if you parse untrusted URIs.

Vapor HTTP Error Handling Security Vulnerability

Vapor 4.84.2 fixes CVE-2023-44386, an error-handling flaw that let an attacker crash an app by triggering a write to a closed channel. Upgrade now.

Upcoming changes to Vapor with `Sendable`

Advance warning of some upcoming changes to Vapor as we continue our Concurrency journey.

PostgresNIO Security Vulnerability

PostgresNIO 1.14.2 fixes CVE-2023-31136, a TLS flaw letting a man-in-the-middle inject responses to a client's first queries. Upgrade as soon as possible.