CVE-2022-31005: 
Swift vulnerability analysis and mitigation

Vapor, an HTTP web framework for Swift, contained a vulnerability (CVE-2022-31005) in versions prior to 4.60.3 that affected users with FileMiddleware enabled. The vulnerability was discovered and disclosed on May 31, 2022, and allowed attackers to cause a Denial of Service (DoS) attack through invalid range headers (GitHub Advisory).

The vulnerability was caused by insufficient validation of HTTP Range request headers in the FileMiddleware component. When processing range headers like '0-9223372036854775807', the application would experience an integer overflow condition, leading to a crash. The issue specifically occurred in the handling of byte range requests for file downloads (GitHub Advisory).

When exploited, this vulnerability could cause a Denial of Service condition by crashing applications that use Vapor's FileMiddleware. Any application with FileMiddleware enabled was vulnerable to this attack, potentially affecting service availability (GitHub Advisory).

The vulnerability was patched in Vapor version 4.60.3. Users are strongly recommended to upgrade to this version or later. As a temporary workaround, users can disable FileMiddleware and serve static files via a CDN instead (GitHub Release, GitHub Advisory).