io.undertow:undertow-http2-test-suite (1.3.0.beta5), io.undertow:undertow-servlet (1.3.0.beta5) +10 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.beta5)

io.undertow:undertow-core MAVEN version 1.3.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta5 - io.undertow:undertow-servlet 1.3.0.beta5 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta7), io.undertow:undertow-servlet (1.3.0.beta7) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.beta7)

io.undertow:undertow-core MAVEN version 1.3.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta7 - io.undertow:undertow-servlet 1.3.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta8), io.undertow:undertow-servlet (1.3.0.beta8) +20 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.beta8)

io.undertow:undertow-core MAVEN version 1.3.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta8 - io.undertow:undertow-servlet 1.3.0.beta8 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta10), io.undertow:undertow-servlet (1.3.0.beta10) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.beta10)

io.undertow:undertow-core MAVEN version 1.3.0.beta10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta10 - io.undertow:undertow-servlet 1.3.0.beta10 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta12), io.undertow:undertow-servlet (1.3.0.beta12) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.beta12)

io.undertow:undertow-core MAVEN version 1.3.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta12 - io.undertow:undertow-servlet 1.3.0.beta12 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr2), io.undertow:undertow-servlet (1.3.0.cr2) +52 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.cr2)

io.undertow:undertow-core MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr2 - io.undertow:undertow-servlet 1.3.0.cr2 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr3), io.undertow:undertow-servlet (1.3.0.cr3) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.0.cr3)

io.undertow:undertow-core MAVEN version 1.3.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr3 - io.undertow:undertow-servlet 1.3.0.cr3 -...

io.undertow:undertow-http2-test-suite (1.3.1.final), io.undertow:undertow-servlet (1.3.1.final) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.1.final)

io.undertow:undertow-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.1.final - io.undertow:undertow-servlet 1.3.1.final -...

io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

io.silverware:http-invoker-microservice-provider (>=1.0, <=2.0), io.silverware:http-server-microservice-provider (>=1.0, <=2.0) +99 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.11.final)

io.undertow:undertow-core MAVEN version 1.3.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.silverware:http-invoker-microservice-provider =1.0, =1.0, =2.0.11.final, =2.0.11.final,...

io.undertow:undertow-http2-test-suite (1.3.13.final), io.undertow:undertow-servlet (1.3.13.final) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.13.final)

io.undertow:undertow-core MAVEN version 1.3.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.13.final - io.undertow:undertow-servlet 1.3.13.final -...

com.fizzed:ninja-undertow (>=5.3.1.undertow1, <=5.3.1.undertow2), io.undertow:undertow-http2-test-suite (1.3.17.final) +4 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.17.final)

io.undertow:undertow-core MAVEN version 1.3.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow =5.3.1.undertow1, =1.1.7, =2.0.0-beta-2 -...

Denial Of Service (DoS)

HTTP2 Server is vulnerable to Denial Of Service DoS. The vulnerability exists in onRequest function in HttpChannelOverHTTP2.java due to improper error handling which allows an attacker to cause an application crash...

com.hexagonkt:http_server_jetty (>=1.3.6, <=1.6.0), com.kumuluz.ee.config:kumuluzee-config-mp-tck (2.0.0) +27 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=10.0.0, <=10.0.9)

org.eclipse.jetty.http2:http2-server MAVEN version =10.0.0, =1.3.6, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.1.0 and more Source cves: CVE-2022-2048 Source advisory: GHSA-WGMR-MF83-7X4J...

app.cash.backfila:client-misk (>=0.1.0, <=0.1.4-20221128.2102-bdd85b6), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +568 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=9.3.0.m0, <=9.4.46.v20220331)

org.eclipse.jetty.http2:http2-server MAVEN version =9.3.0.m0, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =1.0.0, =8.10.1.3, =8.10.1.3, =8.10.1.3, =8.10.1.3, =8.10.1.3...

com.hexagonkt:http_server_jetty (>=2.0.0-b1, <=2.0.14), io.dropwizard:dropwizard-http2 (4.0.0-beta.1) +14 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty.http2:http2-server MAVEN version =11.0.0, =2.0.0-b1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =7.0.0, =11.0.0, =11.0.1, =11.0.0, =11.0.0, =4.6.0.0, =4.27.0.0 and more Source cves: CVE-2022-2048 Source advisory: GHSA-WGMR-MF83-7X4J...

com.hexagonkt:http_server_jetty (>=1.3.6, <=1.6.0), com.kumuluz.ee.config:kumuluzee-config-mp-tck (2.0.0) +27 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=10.0.0, <=10.0.9)

org.eclipse.jetty.http2:http2-server MAVEN version =10.0.0, =1.3.6, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.1, =4.1.0 and more Source cves: CVE-2022-2048 Source advisory:...

com.hexagonkt:http_server_jetty (>=2.0.0-b1, <=2.0.14), io.dropwizard:dropwizard-http2 (4.0.0-beta.1) +14 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty.http2:http2-server MAVEN version =11.0.0, =2.0.0-b1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =7.0.0, =11.0.0, =11.0.1, =11.0.0, =11.0.0, =4.6.0.0, =4.27.0.0 and more Source cves: CVE-2022-2048 Source advisory: OSV:GHSA-WGMR-MF83-7X4J...

app.cash.backfila:client-misk (>=0.1.0, <=0.1.4-20221128.2102-bdd85b6), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +568 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=9.3.0.m0, <=9.4.46.v20220331)

org.eclipse.jetty.http2:http2-server MAVEN version =9.3.0.m0, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =1.0.0, =8.10.1.3, =8.10.1.3, =8.10.1.3, =8.10.1.3, =8.10.1.3...

com.hexagonkt:http_server_jetty (>=2.0.0-b1, <=2.0.14), io.dropwizard:dropwizard-http2 (4.0.0-beta.1) +14 more potentially affected by CVE-2022-2048 via org.eclipse.jetty.http2:http2-server (>=11.0.0, <=11.0.9)

org.eclipse.jetty.http2:http2-server MAVEN version =11.0.0, =2.0.0-b1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =7.0.0, =11.0.0, =11.0.1, =11.0.0, =11.0.0, =4.6.0.0, =4.27.0.0 and more Source cves: CVE-2022-2048 Source advisory: MEND:CVE-2022-2048...