Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/undertow@1.4.23-1?distro=sid
purl pkg:deb/debian/undertow@1.4.23-1?distro=sid
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2e2u-nvuu-kfbs Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Invalid characters are allowed in query strings and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own. CVE-2017-7559
GHSA-rj76-h87p-r3wf

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:31:17.608303+00:00 Debian Importer Fixing VCID-2e2u-nvuu-kfbs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:34:26.013951+00:00 Debian Importer Fixing VCID-2e2u-nvuu-kfbs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:55:44.860850+00:00 Debian Importer Fixing VCID-2e2u-nvuu-kfbs https://security-tracker.debian.org/tracker/data/json 38.1.0