Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3x3v-w654-m28m
  • Maven/io.undertow:undertow-core
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests 24 Mar
  • No fix available
  • Severity - 5.9 (Medium)
GHSA-33hj-rcmx-86mv
  • Maven/io.undertow:undertow-core
Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names 30 Jan
  • Fix available
  • Severity - 7.5 (High)
GHSA-j382-5jj3-vw4j
  • Maven/io.undertow:undertow-core
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests 07 Jan
  • Fix available
  • Severity - 9.6 (Critical)
GHSA-6h4f-pj3g-q8fq
  • Maven/io.undertow:undertow-core
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded 03 Dec 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-95h4-w6j8-2rp8
  • Maven/io.undertow:undertow-core
Undertow MadeYouReset HTTP/2 DDoS Vulnerability 02 Sep 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-3jrv-jgp8-45v3
  • Maven/io.undertow:undertow-core
Undertow incorrectly parses cookies 17 Nov 2024
  • Fix available
  • Severity - 7.4 (High)
GHSA-97cq-f4jm-mv8h
  • Maven/io.undertow:undertow-core
Undertow Denial of Service vulnerability 07 Nov 2024
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-9623-mqmm-5rcf
  • Maven/io.undertow:undertow-core
Undertow vulnerable to Race Condition 21 Aug 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-ch7q-gpff-h9hp
  • Maven/io.undertow:undertow-core
Undertow Missing Release of Memory after Effective Lifetime vulnerability 09 Jul 2024
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-xpp6-8r3j-ww43
  • Maven/io.undertow:undertow-core
Undertow Denial of Service vulnerability 08 Jul 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-9442-gm4v-r222
  • Maven/io.undertow:undertow-core
Undertow's url-encoded request path information can be broken on ajp-listener 20 Jun 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-w6qf-42m7-vh68
  • Maven/io.undertow:undertow-core
Undertow Uncontrolled Resource Consumption Vulnerability 20 Feb 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-v76w-3ph8-vm66
  • Maven/io.undertow:undertow-core
Undertow Path Traversal vulnerability 12 Feb 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-m4mm-pg93-fv78
  • Maven/io.undertow:undertow-core
Undertow denial of service vulnerability 14 Sep 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-pfcc-3g6r-8rg8
  • Maven/io.undertow:undertow-core
Undertow client not checking server identity presented by server certificate in https connections 23 Feb 2023
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-95rf-557x-44g5
  • Maven/io.undertow:undertow-core
Undertow vulnerable to Dos via Large AJP request 06 Aug 2022
  • Fix available
  • Severity - 7.5 (High)