SwiftNIO 2.101.0: DoS via WebSocket frame with oversize 64-bit payload length field (Int trap in WebSocketFrameDecoder) (CVE-2026-43678)

Note: 2.101.0 has been available since 2026-06-08; if you have already updated, no action is needed. Users of SwiftNIO should update to 2.101.0 as soon as practically possible, which addresses the following security issue: WebSocketFrameDecoder converted the 8-byte extended payload length field of a WebSocket frame using Swift's trapping Int(_:) initializer, so any 64-bit length with the most-significant bit set caused a fatal runtime trap. The trap fired before maxFrameSize validation, so n...