Red Hat build of Quarkus/undertow
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Undertow client not checking server identity presented by server certificate in https connections | io.undertow:undertow-coreRed Hat Data Grid 8/undertow | MavenRed Hat | Critical | Fix reported | |
| undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629) | Red Hat Integration Camel K 1/undertowRed Hat Integration Service Registry/undertow | Red Hat | Medium | No fix reported | |
| undertow: Double AJP response for 400 from EAP 7 results in CPING failures | Red Hat Integration Service Registry/undertowRed Hat JBoss Data Grid 7/undertow | Red Hat | Medium | No fix reported |