Red Hat Data Grid 8/undertow
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Undertow vulnerable to Race Condition | io.undertow:undertow-coreRed Hat Build of Keycloak/undertow | MavenRed Hat | High | Fix reported | |
| Undertow client not checking server identity presented by server certificate in https connections | io.undertow:undertow-coreRed Hat Data Grid 8/undertow | MavenRed Hat | Critical | Fix reported | |
| Undertow Path Traversal vulnerability | io.undertow:undertow-coreRed Hat Data Grid 8/undertow | MavenRed Hat | Medium | Fix reported | |
| Undertow Missing Release of Memory after Effective Lifetime vulnerability | io.undertow:undertow-coreOpenShift Serverless/undertow | MavenRed Hat | Medium | Fix reported | |
| Undertow vulnerable to Dos via Large AJP request | io.undertow:undertow-coreRed Hat Data Grid 8/undertow | MavenRed Hat | High | Fix reported | |
| Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations | Red Hat Data Grid 8/undertowRed Hat Fuse 7/undertow | Red Hat | Low | No fix reported |