undertow-core-2.3.18.Final.jar vulnerabilities

CVEs whose affected-version data names the undertow-core-2.3.18.Final.jar package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-5680High· 7.5

4w ago

A flaw was found in Undertow

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDef…

▾ TwilightRed Hat · undertow-coreEPSS 0.58%via NVD