- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 4 high
- Dependents
- 0
- Registry
- Maven Central
Advisories 4
- CVE-2026-28369High 8.7
Undertow: undertow: request smuggling via malformed http request headers
Affected: through 2.3.23.Final.
- CVE-2026-28367High 8.7
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
Affected: through 2.3.23.Final.
- CVE-2026-28368High 8.7
Undertow: undertow: request smuggling via inconsistent header parsing
Affected: through 2.3.23.Final.
- CVE-2023-3223High 7.5
Undertow: outofmemoryerror due to @multipartconfig handling
Affected: fixed in 2.2.24.Final.