cn.niuable:tools-often (1.0.3), com.jfinal:jfinal-undertow (3.6) +9 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.33.final)

io.undertow:undertow-core MAVEN version 2.2.33.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cn.niuable:tools-often 1.0.3 - com.jfinal:jfinal-undertow 3.6 - io.jboot:jboot =4.1.7, =3.5.9, =3.5.9,...

co.paralleluniverse:comsat-actors-undertow (0.1.0), io.undertow:undertow-servlet (1.0.0.beta18) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.beta18)

io.undertow:undertow-core MAVEN version 1.0.0.beta18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-actors-undertow 0.1.0 - io.undertow:undertow-servlet 1.0.0.beta18 -...

io.undertow:undertow-servlet (1.0.0.cr2), io.undertow:undertow-websockets-jsr (1.0.0.cr2) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.cr2)

io.undertow:undertow-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr2 - io.undertow:undertow-websockets-jsr 1.0.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta9), io.undertow:undertow-websockets-jsr (1.0.0.beta9) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.beta9)

io.undertow:undertow-core MAVEN version 1.0.0.beta9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta9 - io.undertow:undertow-websockets-jsr 1.0.0.beta9 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta2), io.undertow:undertow-websockets-jsr (1.1.0.beta2) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta2)

io.undertow:undertow-core MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta2 - io.undertow:undertow-websockets-jsr 1.1.0.beta2 Source cves:...

io.undertow:undertow-dist (1.0.0.alpha1), io.undertow:undertow-servlet (1.0.0.alpha1) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.alpha1)

io.undertow:undertow-core MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.alpha1 - io.undertow:undertow-servlet 1.0.0.alpha1 -...

io.undertow:undertow-http2-test-suite (1.2.0.beta2), io.undertow:undertow-servlet (1.2.0.beta2) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.2.0.beta2)

io.undertow:undertow-core MAVEN version 1.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta2 - io.undertow:undertow-servlet 1.2.0.beta2 -...

com.mpay24.payment:mpay24-payment-sdk (1.0.0.0), com.mpay24.payment:mpay24-soap-base (1.0.0.0) +11 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.10.final)

io.undertow:undertow-core MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 -...

io.undertow:undertow-servlet (1.3.30.final), io.undertow:undertow-websockets-jsr (1.3.30.final) +6 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.30.final)

io.undertow:undertow-core MAVEN version 1.3.30.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.30.final - io.undertow:undertow-websockets-jsr 1.3.30.final -...

io.undertow:undertow-servlet (1.4.0.cr4), io.undertow:undertow-websockets-jsr (1.4.0.cr4) +98 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.4.0.cr4)

io.undertow:undertow-core MAVEN version 1.4.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.0.cr4 - io.undertow:undertow-websockets-jsr 1.4.0.cr4 -...

io.undertow:undertow-servlet (1.1.0.beta4), io.undertow:undertow-websockets-jsr (1.1.0.beta4) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta4)

io.undertow:undertow-core MAVEN version 1.1.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta4 - io.undertow:undertow-websockets-jsr 1.1.0.beta4 Source cves:...

com.salesforce.functions:sf-fx-runtime-java-runtime (>=1.0.2, <=1.0.3), io.mangoo:mangooio-core (7.0.0-beta2) +10 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.11.final)

io.undertow:undertow-core MAVEN version 2.2.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.salesforce.functions:sf-fx-runtime-java-runtime =1.0.2, =7.72.0.final, =7.73.0.final Source cves:...

io.undertow:undertow-servlet (1.0.0.beta26), io.undertow:undertow-websockets-jsr (1.0.0.beta26) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.beta26)

io.undertow:undertow-core MAVEN version 1.0.0.beta26 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta26 - io.undertow:undertow-websockets-jsr 1.0.0.beta26 Source...

com.palantir.conjure.java:conjure-java-core (>=6.17.0, <=6.18.0), com.palantir.conjure.java:conjure-java-undertow-runtime (>=6.17.0, <=6.18.0) +25 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.15.final)

io.undertow:undertow-core MAVEN version 2.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.palantir.conjure.java:conjure-java-core =6.17.0, =6.17.0, =6.17.0, =6.17.0, =6.17.0, =6.18.0 -...

io.undertow:undertow-servlet (1.0.0.beta19), io.undertow:undertow-websockets-jsr (1.0.0.beta19) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.0.0.beta19)

io.undertow:undertow-core MAVEN version 1.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta19 - io.undertow:undertow-websockets-jsr 1.0.0.beta19 Source...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.2.final)

io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

io.undertow:undertow-servlet (1.1.0.beta1), io.undertow:undertow-websockets-jsr (1.1.0.beta1) potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta1)

io.undertow:undertow-core MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta1 - io.undertow:undertow-websockets-jsr 1.1.0.beta1 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta3), io.undertow:undertow-websockets-jsr (1.1.0.beta3) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta3)

io.undertow:undertow-core MAVEN version 1.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta3 - io.undertow:undertow-websockets-jsr 1.1.0.beta3 -...

io.undertow:undertow-http2-test-suite (1.2.3.final), io.undertow:undertow-servlet (1.2.3.final) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.2.3.final)

io.undertow:undertow-core MAVEN version 1.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.3.final - io.undertow:undertow-servlet 1.2.3.final -...

io.undertow:undertow-http2-test-suite (1.3.0.beta4), io.undertow:undertow-servlet (1.3.0.beta4) +37 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta4)

io.undertow:undertow-core MAVEN version 1.3.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta4 - io.undertow:undertow-servlet 1.3.0.beta4 -...