Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2543101
AlmaLinux
6159
Alpaquita
16704
Alpine
4698
Android
3701
Azure Linux
19203
BellSoft Hardened Containers
840
Bitnami
9869
Chainguard
1251691
CleanStart
7683
CRAN
14
crates.io
2833
Debian
71354
Echo
9073
GHC
3
GIT
114555
GitHub Actions
55
Go
9586
Hackage
33
Hex
379
Julia
1713
Linux
30677
Mageia
6299
Maven
7085
MinimOS
181854
npm
229894
NuGet
1924
opam
29
openEuler
9080
openSUSE
14887
OSS-Fuzz
4026
Packagist
7182
Pub
12
PyPI
25896
Red Hat
23995
Rocky Linux
4531
Root
19712
RubyGems
5397
SUSE
23887
SwiftURL
61
TuxCare
17517
Ubuntu
67769
VSCode
21
Wolfi
331220
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3x3v-w654-m28m
Maven/io.undertow:undertow-core
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests
24 Mar
No fix available
Severity - 5.9 (Medium)
GHSA-33hj-rcmx-86mv
Maven/io.undertow:undertow-core
Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names
30 Jan
Fix available
Severity - 7.5 (High)
GHSA-j382-5jj3-vw4j
Maven/io.undertow:undertow-core
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests
07 Jan
Fix available
Severity - 9.6 (Critical)
GHSA-6h4f-pj3g-q8fq
Maven/io.undertow:undertow-core
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
03 Dec 2025
Fix available
Severity - 7.5 (High)
GHSA-95h4-w6j8-2rp8
Maven/io.undertow:undertow-core
Undertow MadeYouReset HTTP/2 DDoS Vulnerability
02 Sep 2025
Fix available
Severity - 7.5 (High)
GHSA-3jrv-jgp8-45v3
Maven/io.undertow:undertow-core
Undertow incorrectly parses cookies
17 Nov 2024
Fix available
Severity - 7.4 (High)
GHSA-97cq-f4jm-mv8h
Maven/io.undertow:undertow-core
Undertow Denial of Service vulnerability
07 Nov 2024
Fix available
Severity - 6.6 (Medium)
GHSA-9623-mqmm-5rcf
Maven/io.undertow:undertow-core
Undertow vulnerable to Race Condition
21 Aug 2024
Fix available
Severity - 8.7 (High)
GHSA-ch7q-gpff-h9hp
Maven/io.undertow:undertow-core
Undertow Missing Release of Memory after Effective Lifetime vulnerability
09 Jul 2024
Fix available
Severity - 6.3 (Medium)
GHSA-xpp6-8r3j-ww43
Maven/io.undertow:undertow-core
Undertow Denial of Service vulnerability
08 Jul 2024
Fix available
Severity - 8.7 (High)
GHSA-9442-gm4v-r222
Maven/io.undertow:undertow-core
Undertow's url-encoded request path information can be broken on ajp-listener
20 Jun 2024
Fix available
Severity - 8.7 (High)
GHSA-w6qf-42m7-vh68
Maven/io.undertow:undertow-core
Undertow Uncontrolled Resource Consumption Vulnerability
20 Feb 2024
Fix available
Severity - 8.7 (High)
GHSA-v76w-3ph8-vm66
Maven/io.undertow:undertow-core
Undertow Path Traversal vulnerability
12 Feb 2024
Fix available
Severity - 5.3 (Medium)
GHSA-m4mm-pg93-fv78
Maven/io.undertow:undertow-core
Undertow denial of service vulnerability
14 Sep 2023
Fix available
Severity - 7.5 (High)
GHSA-pfcc-3g6r-8rg8
Maven/io.undertow:undertow-core
Undertow client not checking server identity presented by server certificate in https connections
23 Feb 2023
Fix available
Severity - 9.8 (Critical)
GHSA-95rf-557x-44g5
Maven/io.undertow:undertow-core
Undertow vulnerable to Dos via Large AJP request
06 Aug 2022
Fix available
Severity - 7.5 (High)
Load more...
Maven - OSV