quarkus-undertow vulnerabilities

CVEs whose affected-version data names the quarkus-undertow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-3653Medium· 5.3

2y ago

A vulnerability was found in Undertow

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the…

▾ SunlitRed Hat · undertowEPSS 1.9%via NVD