Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.undertow/undertow-core@1.2-alpha0
purl pkg:maven/io.undertow/undertow-core@1.2-alpha0
Tags Ghost
Next non-vulnerable version 2.3.20.Final
Latest non-vulnerable version 2.4.0.Beta1
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ntaz-sckf-mubx
Aliases:
CVE-2014-7816
GHSA-h6p6-fc4w-cqhx
Information disclosure via directory traversal Directory traversal vulnerability in this package when running on Windows, allows remote attackers to read arbitrary files via a `..` in a resource URI.
1.2.0.Beta3
Affected by 32 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:46:55.323887+00:00 GitLab Importer Affected by VCID-ntaz-sckf-mubx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2014-7816.yml 38.0.0