undertow-core-2.3.23.SP3-redhat-00001.jar vulnerabilities

CVEs whose affected-version data names the undertow-core-2.3.23.SP3-redhat-00001.jar package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-5680High· 7.5

1mo ago

A flaw was found in Undertow

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDef…

▾ TwilightRed Hat · undertow-coreEPSS 1.1%via NVD