io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

io.inkstand:scribble-http (>=0.3.0, <=0.3.2.1), io.mangoo:mangooio-core (>=2.0.0-beta6, <=2.0.0-beta7) +8 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.6.final)

io.undertow:undertow-core MAVEN version 1.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.inkstand:scribble-http =0.3.0, =2.0.0-beta6, =2.0.0-beta6, =2.0.0-beta6, =2.0.0-beta6, =0.4.0-m1,...

io.undertow:undertow-http2-test-suite (1.3.8.final), io.undertow:undertow-servlet (1.3.8.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.8.final)

io.undertow:undertow-core MAVEN version 1.3.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.8.final - io.undertow:undertow-servlet 1.3.8.final -...

io.undertow:undertow-http2-test-suite (1.3.13.final), io.undertow:undertow-servlet (1.3.13.final) +1 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.13.final)

io.undertow:undertow-core MAVEN version 1.3.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.13.final - io.undertow:undertow-servlet 1.3.13.final -...

undertow Race Condition vulnerability

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS due to the way the Kestrel web...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS due to the way the Kestrel we...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS due to the way the Kestrel web...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS due to the way the Kestrel web...

io.undertow:undertow-http2-test-suite (1.3.0.beta3), io.undertow:undertow-servlet (1.3.0.beta3) +32 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.0.beta3)

io.undertow:undertow-core MAVEN version 1.3.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta3 - io.undertow:undertow-servlet 1.3.0.beta3 -...

io.silverware:http-invoker-microservice-provider (>=1.0, <=2.0), io.silverware:http-server-microservice-provider (>=1.0, <=2.0) +99 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.11.final)

io.undertow:undertow-core MAVEN version 1.3.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.silverware:http-invoker-microservice-provider =1.0, =1.0, =2.0.11.final, =2.0.11.final,...

io.undertow:undertow-http2-test-suite (1.2.2.final), io.undertow:undertow-servlet (1.2.2.final) +2 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.2.final)

io.undertow:undertow-core MAVEN version 1.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.2.final - io.undertow:undertow-servlet 1.2.2.final -...

com.github.zurekp:slb (>=0.0.1, <=0.0.4), io.undertow:undertow-http2-test-suite (1.2.0.beta6) +3 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.0.beta6)

io.undertow:undertow-core MAVEN version 1.2.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.zurekp:slb =0.0.1, =1.0.0.alpha14, =1.0.0.alpha15 Source cves: CVE-2020-1745 Source advisory...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

ch.digitalfondue.stampo:stampo (1.0), ch.digitalfondue.stampo:stampo-maven-plugin (1.0) +37 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.4.final)

io.undertow:undertow-core MAVEN version 1.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - ch.digitalfondue.stampo:stampo 1.0 - ch.digitalfondue.stampo:stampo-maven-plugin 1.0 -...

io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

io.undertow:undertow-http2-test-suite (1.2.0.beta1), io.undertow:undertow-servlet (1.2.0.beta1) +2 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.0.beta1)

io.undertow:undertow-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta1 - io.undertow:undertow-servlet 1.2.0.beta1 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta12), io.undertow:undertow-servlet (1.3.0.beta12) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.0.beta12)

io.undertow:undertow-core MAVEN version 1.3.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta12 - io.undertow:undertow-servlet 1.3.0.beta12 -...

io.undertow:undertow-http2-test-suite (1.2.0.beta9), io.undertow:undertow-servlet (1.2.0.beta9) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.0.beta9)

io.undertow:undertow-core MAVEN version 1.2.0.beta9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta9 - io.undertow:undertow-servlet 1.2.0.beta9 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta7), io.undertow:undertow-servlet (1.3.0.beta7) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.0.beta7)

io.undertow:undertow-core MAVEN version 1.3.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta7 - io.undertow:undertow-servlet 1.3.0.beta7 -...