io.undertow:undertow-servlet (1.1.0.cr5), io.undertow:undertow-websockets-jsr (1.1.0.cr5) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.1.0.cr5)

io.undertow:undertow-core MAVEN version 1.1.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr5 - io.undertow:undertow-websockets-jsr 1.1.0.cr5 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta4), io.undertow:undertow-websockets-jsr (1.0.0.beta4) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta4)

io.undertow:undertow-core MAVEN version 1.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta4 - io.undertow:undertow-websockets-jsr 1.0.0.beta4 Source cves:...

io.undertow:undertow-http2-test-suite (1.3.0.cr2), io.undertow:undertow-servlet (1.3.0.cr2) +52 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.0.cr2)

io.undertow:undertow-core MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr2 - io.undertow:undertow-servlet 1.3.0.cr2 -...

io.undertow:undertow-servlet (1.1.0.beta3), io.undertow:undertow-websockets-jsr (1.1.0.beta3) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.1.0.beta3)

io.undertow:undertow-core MAVEN version 1.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta3 - io.undertow:undertow-websockets-jsr 1.1.0.beta3 -...

io.undertow:undertow-servlet (1.0.0.alpha5), io.undertow:undertow-websockets-jsr (1.0.0.alpha5) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha5)

io.undertow:undertow-core MAVEN version 1.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha5 - io.undertow:undertow-websockets-jsr 1.0.0.alpha5 Source...

io.undertow:undertow-servlet (1.0.0.beta30), io.undertow:undertow-websockets-jsr (1.0.0.beta30) +44 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta30)

io.undertow:undertow-core MAVEN version 1.0.0.beta30 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta30 - io.undertow:undertow-websockets-jsr 1.0.0.beta30 -...

ch.digitalfondue.stampo:stampo (1.0), ch.digitalfondue.stampo:stampo-maven-plugin (1.0) +37 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.2.4.final)

io.undertow:undertow-core MAVEN version 1.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - ch.digitalfondue.stampo:stampo 1.0 - ch.digitalfondue.stampo:stampo-maven-plugin 1.0 -...

Improper Input Validation in Undertow

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an...

GHSA-2W73-FQQJ-C92P Improper Input Validation in Undertow

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an...

io.undertow:undertow-servlet (1.0.0.beta19), io.undertow:undertow-websockets-jsr (1.0.0.beta19) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta19)

io.undertow:undertow-core MAVEN version 1.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta19 - io.undertow:undertow-websockets-jsr 1.0.0.beta19 Source...

io.undertow:undertow-servlet (1.1.0.beta6), io.undertow:undertow-websockets-jsr (1.1.0.beta6) +1 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.1.0.beta6)

io.undertow:undertow-core MAVEN version 1.1.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta6 - io.undertow:undertow-websockets-jsr 1.1.0.beta6 -...

io.undertow:undertow-http2-test-suite (1.2.0.beta5), io.undertow:undertow-servlet (1.2.0.beta5) +2 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.2.0.beta5)

io.undertow:undertow-core MAVEN version 1.2.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta5 - io.undertow:undertow-servlet 1.2.0.beta5 -...

io.undertow:undertow-servlet (1.0.0.alpha9), io.undertow:undertow-websockets-jsr (1.0.0.alpha9) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha9)

io.undertow:undertow-core MAVEN version 1.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha9 - io.undertow:undertow-websockets-jsr 1.0.0.alpha9 Source...

io.undertow:undertow-http2-test-suite (1.3.1.final), io.undertow:undertow-servlet (1.3.1.final) +1 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.1.final)

io.undertow:undertow-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.1.final - io.undertow:undertow-servlet 1.3.1.final -...

io.undertow:undertow-servlet (1.3.31.final), io.undertow:undertow-websockets-jsr (1.3.31.final) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.31.final)

io.undertow:undertow-core MAVEN version 1.3.31.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.31.final - io.undertow:undertow-websockets-jsr 1.3.31.final Source...

io.undertow:undertow-servlet (1.0.0.beta24), io.undertow:undertow-websockets-jsr (1.0.0.beta24) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta24)

io.undertow:undertow-core MAVEN version 1.0.0.beta24 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta24 - io.undertow:undertow-websockets-jsr 1.0.0.beta24 Source...

io.undertow:undertow-servlet (1.0.0.beta12), io.undertow:undertow-websockets-jsr (1.0.0.beta12) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta12)

io.undertow:undertow-core MAVEN version 1.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta12 - io.undertow:undertow-websockets-jsr 1.0.0.beta12 Source...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.1.0.cr5), io.undertow:undertow-websockets-jsr (1.1.0.cr5) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.1.0.cr5)

io.undertow:undertow-core MAVEN version 1.1.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr5 - io.undertow:undertow-websockets-jsr 1.1.0.cr5 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta16), io.undertow:undertow-websockets-jsr (1.0.0.beta16) potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.0.0.beta16)

io.undertow:undertow-core MAVEN version 1.0.0.beta16 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta16 - io.undertow:undertow-websockets-jsr 1.0.0.beta16 Source...