Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.Alpha0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-67vd-ggxw-aaaj
Aliases: CVE-2016-4993 GHSA-qcqr-hcjq-whfq |
Improper Neutralization of CRLF Sequences in HTTP Headers CRLF injection vulnerability in the Undertow web server allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. |
Affected by 38 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 35 other vulnerabilities. |
|
VCID-kq61-ccrm-aaan
Aliases: CVE-2016-7046 GHSA-3f57-w2rp-72fc |
Uncontrolled Resource Consumption Remote attackers could cause a denial of service (CPU and disk consumption) via a long URL. |
Affected by 35 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:37:09.841452+00:00 | GitLab Importer | Affected by | VCID-67vd-ggxw-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2016-4993.yml | 34.0.1 |
| 2024-09-17T22:37:09.286197+00:00 | GitLab Importer | Affected by | VCID-kq61-ccrm-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2016-7046.yml | 34.0.1 |
| 2024-01-03T18:00:09.651215+00:00 | GitLab Importer | Affected by | VCID-67vd-ggxw-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2016-4993.yml | 34.0.0rc1 |
| 2024-01-03T18:00:09.201312+00:00 | GitLab Importer | Affected by | VCID-kq61-ccrm-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2016-7046.yml | 34.0.0rc1 |