Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform Expansion Pack/undertow-core
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests
CVE-2026-3260 · GHSA-3X3V-W654-M28M
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
Medium
No fix reported
2026-09-10
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests
CVE-2025-12543 · GHSA-J382-5JJ3-VW4J
io.undertow:undertow-core
Red Hat Data Grid 8/undertow-core
Maven
Red Hat
Critical
Fix reported
2026-09-10
undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing
CVE-2026-5680
Red Hat Data Grid 8/undertow-core
Red Hat JBoss Enterprise Application Platform 7/undertow-core
Red Hat
High
No fix reported
Not recorded
undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap
CVE-2026-14180
Red Hat Data Grid 8/undertow-core
Red Hat Enterprise Linux 10/moditect
Red Hat
Medium
No fix reported
Not recorded
io.undertow/undertow: Undertow: HTTP response header integrity issue due to character truncation
CVE-2026-19879
Red Hat Enterprise Linux 10/moditect
Red Hat Enterprise Linux 8/pki-core:10.6/resteasy
Red Hat
Medium
No fix reported
Not recorded
