Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 8/undertow-core
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Undertow is Vulnerable to HTTP Request/Response Smuggling
CVE-2026-28367 · GHSA-3GV6-G396-9V4R
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
High
Fix reported
2026-11-05
Undertow is Vulnerable to HTTP Request/Response Smuggling
CVE-2026-28368 · GHSA-8V4X-MGVP-P658
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
High
Fix reported
2026-11-05
Undertow is Vulnerable to HTTP Request/Response Smuggling
CVE-2026-28369 · GHSA-VQQJ-9CMV-HX43
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
High
Fix reported
2026-11-05
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests
CVE-2026-3260 · GHSA-3X3V-W654-M28M
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
Medium
No fix reported
2026-09-10
undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing
CVE-2026-5680
Red Hat Data Grid 8/undertow-core
Red Hat JBoss Enterprise Application Platform 7/undertow-core
Red Hat
High
No fix reported
Not recorded
artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default
CVE-2026-86404
Red Hat JBoss Enterprise Application Platform 7/artemis-jms-client
Red Hat JBoss Enterprise Application Platform 7/artemis-server
Red Hat
High
No fix reported
Not recorded
io.undertow/undertow: Undertow: HTTP response header integrity issue due to character truncation
CVE-2026-19879
Red Hat Enterprise Linux 10/moditect
Red Hat Enterprise Linux 8/pki-core:10.6/resteasy
Red Hat
Medium
No fix reported
Not recorded
undertow-core: undertow: WebSocketContainer defaults for buffers and timeouts are infinite
CVE-2026-81624
Red Hat Fuse 7/undertow-core
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation
CVE-2026-49362
Red Hat JBoss Enterprise Application Platform 7/artemis-server
Red Hat JBoss Enterprise Application Platform 7/undertow-core
Red Hat
High
No fix reported
Not recorded
