Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jboss.eap/wildfly-undertow@7.1.0.GA
purl pkg:maven/org.jboss.eap/wildfly-undertow@7.1.0.GA
Next non-vulnerable version 7.1.2.GA
Latest non-vulnerable version 7.1.2.GA
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1w4t-um5v-jkfv
Aliases:
CVE-2018-1048
GHSA-prfw-3qx6-g9xr
Path Traversal The AJP connector in undertow does not use the `ALLOW_ENCODED_SLASH` option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.
7.1.1.GA
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:01:02.114446+00:00 GHSA Importer Affected by VCID-1w4t-um5v-jkfv https://github.com/advisories/GHSA-prfw-3qx6-g9xr 38.0.0
2026-04-01T13:08:10.763861+00:00 GithubOSV Importer Affected by VCID-1w4t-um5v-jkfv https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-prfw-3qx6-g9xr/GHSA-prfw-3qx6-g9xr.json 38.0.0
2026-04-01T12:50:14.185441+00:00 GitLab Importer Affected by VCID-1w4t-um5v-jkfv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jboss.eap/wildfly-undertow/CVE-2018-1048.yml 38.0.0