Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.2.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5y4u-f2nk-aaac
Aliases: CVE-2021-3690 GHSA-fj7c-vg2v-ccrm GMS-2022-2964 |
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability. |
Affected by 0 other vulnerabilities. Affected by 18 other vulnerabilities. |
|
VCID-ga84-mep2-aaar
Aliases: CVE-2021-3629 GHSA-rf6q-vx79-mjxr |
Uncontrolled Resource Consumption in Undertow |
Affected by 0 other vulnerabilities. Affected by 17 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-01-17T02:39:05.061810+00:00 | GHSA Importer | Affected by | VCID-5y4u-f2nk-aaac | None | 35.1.0 |
| 2025-01-16T23:29:11.649262+00:00 | GitLab Importer | Affected by | VCID-5y4u-f2nk-aaac | None | 35.1.0 |
| 2024-09-17T22:37:09.779656+00:00 | GitLab Importer | Affected by | VCID-ga84-mep2-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2021-3629.yml | 34.0.1 |
| 2024-09-17T22:04:19.546134+00:00 | GHSA Importer | Affected by | VCID-5y4u-f2nk-aaac | https://github.com/advisories/GHSA-fj7c-vg2v-ccrm | 34.0.1 |
| 2024-01-03T18:00:09.594166+00:00 | GitLab Importer | Affected by | VCID-ga84-mep2-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2021-3629.yml | 34.0.0rc1 |
| 2024-01-03T17:39:03.147145+00:00 | GHSA Importer | Affected by | VCID-5y4u-f2nk-aaac | https://github.com/advisories/GHSA-fj7c-vg2v-ccrm | 34.0.0rc1 |