Security
فارسی
All products

Red Hat Fuse 7/undertow-core

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow is Vulnerable to HTTP Request/Response SmugglingCVE-2026-28367 · GHSA-3GV6-G396-9V4R io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat High Fix reported
Undertow is Vulnerable to HTTP Request/Response SmugglingCVE-2026-28368 · GHSA-8V4X-MGVP-P658 io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat High Fix reported
Undertow is Vulnerable to HTTP Request/Response SmugglingCVE-2026-28369 · GHSA-VQQJ-9CMV-HX43 io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat High Fix reported
Undertow MadeYouReset HTTP/2 DDoS VulnerabilityCVE-2025-9784 · GHSA-95H4-W6J8-2RP8 io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat High Fix reported
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET RequestsCVE-2026-3260 · GHSA-3X3V-W654-M28M io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat Medium No fix reported
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requestsCVE-2025-12543 · GHSA-J382-5JJ3-VW4J io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat Critical Fix reported
undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlapCVE-2026-14180 Red Hat Data Grid 8/undertow-coreRed Hat Enterprise Linux 10/moditect Red Hat Medium No fix reported
undertow-core: undertow: WebSocketContainer defaults for buffers and timeouts are infiniteCVE-2026-81624 Red Hat Fuse 7/undertow-coreRed Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 Red Hat High No fix reported