Search for packages
purl | pkg:maven/io.undertow/undertow-core@2.1.0 |
Tags | Ghost |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-5y4u-f2nk-aaac
Aliases: CVE-2021-3690 GHSA-fj7c-vg2v-ccrm GMS-2022-2964 |
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability. |
Affected by 0 other vulnerabilities. Affected by 18 other vulnerabilities. |
VCID-b1av-s4ht-aaan
Aliases: CVE-2021-3597 GHSA-mfhv-gwf8-4m88 |
Race condition in undertow |
Affected by 19 other vulnerabilities. |
VCID-ga84-mep2-aaar
Aliases: CVE-2021-3629 GHSA-rf6q-vx79-mjxr |
Uncontrolled Resource Consumption in Undertow |
Affected by 0 other vulnerabilities. Affected by 17 other vulnerabilities. |
VCID-kg8u-acdw-aaab
Aliases: CVE-2020-27782 GHSA-rhcw-wjcm-9h6g |
Denial of service in Undertow |
Affected by 0 other vulnerabilities. Affected by 23 other vulnerabilities. Affected by 21 other vulnerabilities. Affected by 20 other vulnerabilities. |
VCID-pxqf-nvea-aaar
Aliases: CVE-2021-20220 GHSA-qjwc-v72v-fq6r |
HTTP request smuggling in Undertow |
Affected by 0 other vulnerabilities. Affected by 21 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |