1658 matches found
EUVD-2022-4009
Malicious code in bioql PyPI...
EUVD-2024-0728
Malicious code in bioql PyPI...
EUVD-2022-2061
Malicious code in bioql PyPI...
EUVD-2023-2542
Malicious code in bioql PyPI...
EUVD-2022-4678
Malicious code in bioql PyPI...
EUVD-2022-2327
Malicious code in bioql PyPI...
EUVD-2022-6212
Malicious code in bioql PyPI...
EUVD-2022-35006
Malicious code in bioql PyPI...
Denial Of Service (DoS)
io.undertow, undertow-core is vulnerable to Denial of Service DoS. The vulnerability is due to malformed client requests triggering server-side stream resets without abuse counters, which allows an attacker to repeatedly cause stream aborts and induce excessive server workload...
undertow: information leakage via HTTP/2 request header reuse
REJECTED CVE A vulnerability has been identified in the Undertow package where the readHpackString method may incorrectly reuse an HTTP request header value from a previous stream for a new request on the same HTTP/2 connection due to improper handling of the stringBuilder field. While this...
undertow: Improper State Management in Proxy Protocol parsing causes information leakage
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the...
undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header
A flaw was discovered in Undertow where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...
undertow: information leakage via HTTP/2 request header reuse
REJECTED CVE A vulnerability has been identified in the Undertow package where the readHpackString method may incorrectly reuse an HTTP request header value from a previous stream for a new request on the same HTTP/2 connection due to improper handling of the stringBuilder field. While this...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.12 on RHEL 7 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Malicious code in giraffe-undertow-wtx566-project (npm)
The package giraffe-undertow-wtx566-project was found to contain malicious code...
Malicious code in hammock-undertow-lsx730-project (npm)
The package hammock-undertow-lsx730-project was found to contain malicious code...
MAL-2025-44519 Malicious code in hammock-undertow-lsx730-project (npm)
The package hammock-undertow-lsx730-project was found to contain malicious code...
MAL-2025-44413 Malicious code in giraffe-undertow-wtx566-project (npm)
The package giraffe-undertow-wtx566-project was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2025-9784
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as...
