CVE-2026-91920

A flaw exists in the ChunkReader component of the Undertow web server used for handling chunked transfer encoding in HTTP requests. The root cause is that a security check for the chunk size is performed before the value is shifted, allowing a specially crafted 15-digit chunk size to bypass limit...