io.undertow:undertow-servlet (1.1.0.beta4), io.undertow:undertow-websockets-jsr (1.1.0.beta4) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.0.beta4)

io.undertow:undertow-core MAVEN version 1.1.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta4 - io.undertow:undertow-websockets-jsr 1.1.0.beta4 Source cves:...

io.undertow:undertow-http2-test-suite (1.3.0.cr3), io.undertow:undertow-servlet (1.3.0.cr3) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.0.cr3)

io.undertow:undertow-core MAVEN version 1.3.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr3 - io.undertow:undertow-servlet 1.3.0.cr3 -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-http2-test-suite (1.3.0.beta5), io.undertow:undertow-servlet (1.3.0.beta5) +10 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.0.beta5)

io.undertow:undertow-core MAVEN version 1.3.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta5 - io.undertow:undertow-servlet 1.3.0.beta5 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta7), io.undertow:undertow-servlet (1.3.0.beta7) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.0.beta7)

io.undertow:undertow-core MAVEN version 1.3.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta7 - io.undertow:undertow-servlet 1.3.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.2.3.final), io.undertow:undertow-servlet (1.2.3.final) +2 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.2.3.final)

io.undertow:undertow-core MAVEN version 1.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.3.final - io.undertow:undertow-servlet 1.2.3.final -...

[SECURITY] Fedora 40 Update: python-quart-0.19.8-1.fc40

Quart is an async Python web microframework. Using Quart you can, render and serve HTML templates, write RESTful JSON APIs, serve WebSockets, stream request and response data, do pretty much anything over the HTTP or WebSocket protocols...

[SECURITY] Fedora 41 Update: python-quart-0.19.8-1.fc41

Quart is an async Python web microframework. Using Quart you can, render and serve HTML templates, write RESTful JSON APIs, serve WebSockets, stream request and response data, do pretty much anything over the HTTP or WebSocket protocols...

Important: qt5-qtwebsockets

Issue Overview: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not ye...

PT-2025-2806 · Flxeon · Flxeon

Name of the Vulnerable Software and Affected Versions: FLXEON versions through = 9.3.4 Description: The issue is related to a lack of origin validation in WebSockets, which allows unauthorized HTTPS requests due to insufficient session management. This can be exploited by a remote attacker to...

Mattermost fails to strip `embeds` from `metadata` when broadcasting `posted` events

Mattermost does not strip embeds from metadata when broadcasting posted events. This allows users to include arbitrary embeds in posts, which are then broadcasted via websockets. This can be exploited in many ways, for example to create permalinks with fully customizable content or to trigger a...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.2.final)

io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-servlet (1.1.0.cr3), io.undertow:undertow-websockets-jsr (1.1.0.cr3) potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.cr3)

io.undertow:undertow-core MAVEN version 1.1.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr3 - io.undertow:undertow-websockets-jsr 1.1.0.cr3 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr4), io.undertow:undertow-websockets-jsr (1.1.0.cr4) potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.cr4)

io.undertow:undertow-core MAVEN version 1.1.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr4 - io.undertow:undertow-websockets-jsr 1.1.0.cr4 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr6), io.undertow:undertow-websockets-jsr (1.1.0.cr6) potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.cr6)

io.undertow:undertow-core MAVEN version 1.1.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr6 - io.undertow:undertow-websockets-jsr 1.1.0.cr6 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr2), io.undertow:undertow-websockets-jsr (1.1.0.cr2) potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.cr2)

io.undertow:undertow-core MAVEN version 1.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr2 - io.undertow:undertow-websockets-jsr 1.1.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta2), io.undertow:undertow-websockets-jsr (1.1.0.beta2) potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.beta2)

io.undertow:undertow-core MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta2 - io.undertow:undertow-websockets-jsr 1.1.0.beta2 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta3), io.undertow:undertow-websockets-jsr (1.1.0.beta3) +1 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.beta3)

io.undertow:undertow-core MAVEN version 1.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta3 - io.undertow:undertow-websockets-jsr 1.1.0.beta3 -...