{"id":"CVE-2021-20220","aliases":["DEBIAN-CVE-2021-20220","EUVD-2021-1382","GHSA-qjwc-v72v-fq6r","RHSA-2021:0872","RHSA-2021:0873","RHSA-2021:0874","UBUNTU-CVE-2021-20220"],"status":"published","title":"HTTP request smuggling in Undertow","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.012,"percentile":0.68611,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-444"],"published":"2021-02-23T17:21:44Z","modified":"2026-10-24T10:30:29Z","fixes":[{"ecosystem":"Maven","package":"io.undertow:undertow-core","fixed_in":["2.1.6","2.0.34"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:14","package":"undertow","fixed_in":["2.2.0-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.6"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.34"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1"}]}],"versions":["1.3.11-1","1.3.16-1","1.3.19-1","1.3.21-1","1.3.23-1","1.3.4-1","1.3.5-1","1.3.7-1","1.4.0-1","1.4.1-1","1.4.18-1","1.4.20-1","1.4.21-1","1.4.21-2","1.4.22-1","1.4.23-1","1.4.23-2","1.4.23-3","1.4.25-1","1.4.25-2","1.4.3-1","1.4.4-1","1.4.6-1","1.4.7-1","1.4.8-1","2.0.23-1","2.0.25-1","2.0.26-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.30-1","2.1.0-1","2.1.1-1","2.1.3-1"]},{"source":"osv","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.6"}]}],"versions":["2.1.0.Final","2.1.1.Final","2.1.2.Final","2.1.3.Final","2.1.4.Final","2.1.5.Final"]},{"source":"osv","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.34"}]}],"versions":["1.0.0.Alpha1","1.0.0.Alpha10","1.0.0.Alpha11","1.0.0.Alpha12","1.0.0.Alpha13","1.0.0.Alpha14","1.0.0.Alpha15","1.0.0.Alpha16","1.0.0.Alpha17","1.0.0.Alpha18","1.0.0.Alpha19","1.0.0.Alpha2","1.0.0.Alpha20","1.0.0.Alpha21","1.0.0.Alpha22","1.0.0.Alpha3","1.0.0.Alpha4","1.0.0.Alpha5","1.0.0.Alpha6","1.0.0.Alpha7","1.0.0.Alpha8","1.0.0.Alpha9","1.0.0.Beta1","1.0.0.Beta10","1.0.0.Beta11","1.0.0.Beta12","1.0.0.Beta13","1.0.0.Beta14","1.0.0.Beta15","1.0.0.Beta16","1.0.0.Beta17","1.0.0.Beta18","1.0.0.Beta19","1.0.0.Beta2","1.0.0.Beta20","1.0.0.Beta21","1.0.0.Beta22","1.0.0.Beta23","1.0.0.Beta24","1.0.0.Beta25","1.0.0.Beta26","1.0.0.Beta27","1.0.0.Beta28","1.0.0.Beta29","1.0.0.Beta3","1.0.0.Beta30","1.0.0.Beta31","1.0.0.Beta32","1.0.0.Beta33","1.0.0.Beta4","1.0.0.Beta5","1.0.0.Beta6","1.0.0.Beta7","1.0.0.Beta8","1.0.0.Beta9","1.0.0.CR1","1.0.0.CR2","1.0.0.CR3","1.0.0.CR4","1.0.0.CR5","1.0.0.Final","1.0.1.Final","1.0.10.Final","1.0.11.Final","1.0.12.Final","1.0.13.Final","1.0.14.Final","1.0.15.Final","1.0.16.Final","1.0.17.Final","1.0.18.Final","1.0.19.Final","1.0.2.Final","1.0.3.Final","1.0.4.Final","1.0.5.Final","1.0.6.Final","1.0.7.Final","1.0.8.Final","1.0.9.Final","1.1.0.Beta1","1.1.0.Beta2","1.1.0.Beta3","1.1.0.Beta4","1.1.0.Beta5","1.1.0.Beta6","1.1.0.Beta7","1.1.0.Beta8","1.1.0.CR1","1.1.0.CR2","1.1.0.CR3","1.1.0.CR4","1.1.0.CR5","1.1.0.CR6","1.1.0.CR7","1.1.0.CR8","1.1.0.Final","1.1.1.Final","1.1.2.Final","1.1.3.Final","1.1.4.Final","1.1.5.Final","1.1.6.Final","1.1.7.Final","1.1.8.Final","1.1.9.Final","1.2.0.Beta1","1.2.0.Beta10","1.2.0.Beta2","1.2.0.Beta3","1.2.0.Beta4","1.2.0.Beta5","1.2.0.Beta6","1.2.0.Beta7","1.2.0.Beta8","1.2.0.Beta9","1.2.0.CR1","1.2.0.Final","1.2.1.Final","1.2.10.Final","1.2.11.Final","1.2.12.Final","1.2.2.Final","1.2.3.Final","1.2.4.Final","1.2.5.Final","1.2.6.Final","1.2.7.Final","1.2.8.Final","1.2.9.Final","1.3.0.Beta1","1.3.0.Beta10","1.3.0.Beta11","1.3.0.Beta12","1.3.0.Beta13","1.3.0.Beta2","1.3.0.Beta3","1.3.0.Beta4","1.3.0.Beta5","1.3.0.Beta6","1.3.0.Beta7","1.3.0.Beta8","1.3.0.Beta9","1.3.0.CR1","1.3.0.CR2","1.3.0.CR3","1.3.0.Final","1.3.1.Final","1.3.10.Final","1.3.11.Final","1.3.12.Final","1.3.13.Final","1.3.14.Final","1.3.15.Final","1.3.16.Final","1.3.17.Final","1.3.18.Final","1.3.19.Final","1.3.2.Final","1.3.20.Final","1.3.21.Final","1.3.22.Final","1.3.23.Final","1.3.24.Final","1.3.25.Final","1.3.26.Final","1.3.27.Final","1.3.28.Final","1.3.29.Final","1.3.3.Final","1.3.30.Final","1.3.31.Final","1.3.32.Final","1.3.33.Final","1.3.4.Final","1.3.5.Final","1.3.6.Final","1.3.7.Final","1.3.8.Final","1.3.9.Final","1.4.0.Beta1","1.4.0.CR1","1.4.0.CR2","1.4.0.CR3","1.4.0.CR4","1.4.0.Final","1.4.1.Final","1.4.10.Final","1.4.11.Final","1.4.12.Final","1.4.13.Final","1.4.14.Final","1.4.15.Final","1.4.16.Final","1.4.17.Final","1.4.18.Final","1.4.19.Final","1.4.2.Final","1.4.20.Final","1.4.21.Final","1.4.22.Final","1.4.23.Final","1.4.24.Final","1.4.25.Final","1.4.26.Final","1.4.27.Final","1.4.28.Final","1.4.3.Final","1.4.4.Final","1.4.5.Final","1.4.6.Final","1.4.7.Final","1.4.8.Final","1.4.9.Final","2.0.0.Alpha1","2.0.0.Beta1","2.0.0.Final","2.0.1.Final","2.0.10.Final","2.0.11.Final","2.0.12.Final","2.0.13.Final","2.0.14.Final","2.0.15.Final","2.0.16.Final","2.0.17.Final","2.0.18.Final","2.0.19.Final","2.0.2.Final","2.0.20.Final","2.0.21.Final","2.0.22.Final","2.0.23.Final","2.0.24.Final","2.0.25.Final","2.0.26.Final","2.0.27.Final","2.0.28.Final","2.0.29.Final","2.0.3.Final","2.0.30.Final","2.0.31.Final","2.0.32.Final","2.0.33.Final","2.0.4.Final","2.0.5.Final","2.0.6.Final","2.0.7.Final","2.0.8.Final","2.0.9.Final"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-guava-failureaccess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.redhat_00002.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.39-1.SP1_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.20-2.SP1_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-compensations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-narayana-txframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.SP1_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-guava-failureaccess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.39-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.20-2.SP1_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-compensations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-narayana-txframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-9.redhat_00019.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-guava-failureaccess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.redhat_00002.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:30.1.0-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.13-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.39-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.20-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-5.Final_redhat_00006.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-compensations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-narayana-txframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.34-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.GA_redhat_00002.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-1","1.3.5-1","1.3.7-1","1.3.11-1","1.3.16-1","1.3.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.20-1","1.4.21-1","1.4.22-1","1.4.23-1","1.4.23-2build1","1.4.23-3","1.4.23-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.23-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.29-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.8-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2","2.3.8-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-1","2.3.18-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.20-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-2","2.3.20-1","2.3.20-1ubuntu1"]}],"products":[{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"red hat","product":"undertow"},{"vendor":"redhat","product":"undertow"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923133","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220210-0013/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20220","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/commit/9e797b2f99617fdad0471eaa88c711ee7f44605f","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qjwc-v72v-fq6r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20220","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220210-0013","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0872","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929479","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-20336","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20628","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20672","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20694","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20695","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20715","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20762","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20791","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20795","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20802","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20805","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20815","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20816","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20883","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20887","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20908","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20918","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-20941","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0872.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8908","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8908","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1785049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35510","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35510","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35510","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20220","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20250","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20250","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0873","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-20716","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0873.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0874","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-20717","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0874.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20220","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T17:21:44Z","modified":"2024-08-03T17:30:07.487Z","cwes":["CWE-444"],"updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2021-1382","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T17:21:44Z","modified":"2024-08-03T17:30:07Z","updated_at":"2026-11-03T03:25:10.418596Z"}],"ghsa":[{"id":"GHSA-qjwc-v72v-fq6r","title":"HTTP request smuggling in Undertow","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-06-16T17:47:52Z","modified":"2023-02-01T05:05:22Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:36:33.613868Z"}],"nvd":[{"id":"CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T18:15:13.397Z","modified":"2026-06-17T03:33:29.67Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:06:50.031227Z"}],"osv":[{"id":"CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T18:15:13.397Z","modified":"2026-10-24T10:30:29.140925905Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T18:15:13.397Z","modified":"2026-10-23T18:03:10.17597224Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"GHSA-qjwc-v72v-fq6r","title":"HTTP request smuggling in Undertow","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-06-16T17:47:52Z","modified":"2024-02-17T05:25:37.784324Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:46:54.760124Z"},{"id":"RHSA-2021:0872","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update","status":"published","published":"2024-09-13T22:43:48Z","modified":"2026-10-13T10:02:11Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0873","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update","status":"published","published":"2024-09-13T22:44:04Z","modified":"2026-10-13T10:02:12Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0874","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update","status":"published","published":"2024-09-13T22:43:57Z","modified":"2026-10-13T10:02:12Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2021-20220","description":"A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-02-23T18:15:00Z","modified":"2026-10-17T12:56:19.360264577Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"}]}}