Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.undertow/undertow-parent@1.3.16.Final
purl pkg:maven/io.undertow/undertow-parent@1.3.16.Final
Next non-vulnerable version 2.2.24.Final
Latest non-vulnerable version 2.2.24.Final
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-7yc7-e35f-8uhj
Aliases:
CVE-2023-3223
GHSA-65h2-wf7m-q2v8
Uncontrolled Resource Consumption A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.
2.2.24.Final
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:39:29.611687+00:00 GitLab Importer Affected by VCID-7yc7-e35f-8uhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-parent/CVE-2023-3223.yml 38.4.0
2026-04-11T23:58:56.604461+00:00 GitLab Importer Affected by VCID-7yc7-e35f-8uhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-parent/CVE-2023-3223.yml 38.3.0
2026-04-03T00:02:00.735699+00:00 GitLab Importer Affected by VCID-7yc7-e35f-8uhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-parent/CVE-2023-3223.yml 38.1.0