{"id":"CVE-2024-3653","aliases":["CLSA-2025-1766534903","CLSA-2026-1782349133","CLSA-2026-1786429829","CLSA-2026-1793853308","CLSA-2026-1794162511","CLSA-2026-1794235099","CLSA-2026-1794235365","CLSA-2026-1794235562","CLSA-2026-1794235949","CLSA-2026-1794236374","CLSA-2026-1794236816","CLSA-2026-1794246287","CLSA-2026-1794246653","DEBIAN-CVE-2024-3653","EUVD-2024-2322","GHSA-ch7q-gpff-h9hp","GHSA-cxrx-q234-m22m","RHLW-2026-f6f1fa9b81c3bbbe","RHSA-2024:5143","RHSA-2024:5144","RHSA-2024:5145","UBUNTU-CVE-2024-3653"],"status":"published","title":"Undertow: learningpushhandler can lead to remote memory dos attacks","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01866,"percentile":0.79451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2024-07-08T21:21:20Z","modified":"2026-11-10T01:15:04Z","fixes":[{"ecosystem":"Maven","package":"io.undertow:undertow-core","fixed_in":["2.3.15.Final","2.2.34.Final"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","fixed_in":["2.2.33.Final-tuxcare.6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"undertow","fixed_in":["2.3.18-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0.Alpha1"},{"fixed":"2.3.15.Final"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34.Final"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.10.Final"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"versions":["2.3.10.Final","2.3.10.Final-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0.Final"},{"fixed":"2.3.0.Final-tuxcare.3"}]}],"versions":["2.3.0.Final","2.3.0.Final-tuxcare.1","2.3.0.Final-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.33.Final"},{"fixed":"2.2.33.Final-tuxcare.6"}]}],"versions":["2.2.33.Final","2.2.33.Final-tuxcare.1","2.2.33.Final-tuxcare.2","2.2.33.Final-tuxcare.3","2.2.33.Final-tuxcare.4","2.2.33.Final-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.27.Final"},{"fixed":"1.4.27.Final-tuxcare.3"}]}],"versions":["1.4.27.Final","1.4.27.Final-tuxcare.1","1.4.27.Final-tuxcare.2"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.26.Final"},{"fixed":"2.0.26.Final-tuxcare.2"}]}],"versions":["2.0.26.Final","2.0.26.Final-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.7.Final"},{"fixed":"2.2.7.Final-tuxcare.1"}]}],"versions":["2.2.7.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.7.Final"},{"fixed":"2.1.7.Final-tuxcare.1"}]}],"versions":["2.1.7.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.32.Final"},{"fixed":"2.0.32.Final-tuxcare.1"}]}],"versions":["2.0.32.Final"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.4.Final"},{"fixed":"2.1.4.Final-tuxcare.1"}]}],"versions":["2.1.4.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.20.Final"},{"fixed":"2.2.20.Final-tuxcare.1"}]}],"versions":["2.2.20.Final"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.17.Final"},{"fixed":"2.2.17.Final-tuxcare.1"}]}],"versions":["2.2.17.Final"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.24.Final"},{"fixed":"2.2.24.Final-tuxcare.2"}]}],"versions":["2.2.24.Final","2.2.24.Final-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.28.Final"},{"fixed":"2.2.28.Final-tuxcare.1"}]}],"versions":["2.2.28.Final"],"bundled":11},{"source":"osv","ecosystem":"Debian:14","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.18-1"}]}],"versions":["1.3.11-1","1.3.16-1","1.3.19-1","1.3.21-1","1.3.23-1","1.3.4-1","1.3.5-1","1.3.7-1","1.4.0-1","1.4.1-1","1.4.18-1","1.4.20-1","1.4.21-1","1.4.21-2","1.4.22-1","1.4.23-1","1.4.23-2","1.4.23-3","1.4.25-1","1.4.25-2","1.4.3-1","1.4.4-1","1.4.6-1","1.4.7-1","1.4.8-1","2.0.23-1","2.0.25-1","2.0.26-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.30-1","2.1.0-1","2.1.1-1","2.1.3-1","2.2.0-1","2.2.10-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.17-1","2.2.18-1","2.2.19-1","2.2.2-1","2.2.20-1","2.2.21-1","2.2.3-1","2.2.4-1","2.2.5-1","2.2.8-1","2.3.8-1","2.3.8-2"]},{"source":"osv","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0.Alpha1"},{"fixed":"2.3.15.Final"}]}],"versions":["2.3.0.Alpha1","2.3.0.Alpha2","2.3.0.Beta1","2.3.0.Final","2.3.1.Final","2.3.10.Final","2.3.11.Final","2.3.12.Final","2.3.13.Final","2.3.14.Final","2.3.2.Final","2.3.3.Final","2.3.4.Final","2.3.5.Final","2.3.6.Final","2.3.7.Final","2.3.8.Final","2.3.9.Final"]},{"source":"osv","ecosystem":"Maven","package":"io.undertow:undertow-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.34.Final"}]}],"versions":["1.0.0.Alpha1","1.0.0.Alpha10","1.0.0.Alpha11","1.0.0.Alpha12","1.0.0.Alpha13","1.0.0.Alpha14","1.0.0.Alpha15","1.0.0.Alpha16","1.0.0.Alpha17","1.0.0.Alpha18","1.0.0.Alpha19","1.0.0.Alpha2","1.0.0.Alpha20","1.0.0.Alpha21","1.0.0.Alpha22","1.0.0.Alpha3","1.0.0.Alpha4","1.0.0.Alpha5","1.0.0.Alpha6","1.0.0.Alpha7","1.0.0.Alpha8","1.0.0.Alpha9","1.0.0.Beta1","1.0.0.Beta10","1.0.0.Beta11","1.0.0.Beta12","1.0.0.Beta13","1.0.0.Beta14","1.0.0.Beta15","1.0.0.Beta16","1.0.0.Beta17","1.0.0.Beta18","1.0.0.Beta19","1.0.0.Beta2","1.0.0.Beta20","1.0.0.Beta21","1.0.0.Beta22","1.0.0.Beta23","1.0.0.Beta24","1.0.0.Beta25","1.0.0.Beta26","1.0.0.Beta27","1.0.0.Beta28","1.0.0.Beta29","1.0.0.Beta3","1.0.0.Beta30","1.0.0.Beta31","1.0.0.Beta32","1.0.0.Beta33","1.0.0.Beta4","1.0.0.Beta5","1.0.0.Beta6","1.0.0.Beta7","1.0.0.Beta8","1.0.0.Beta9","1.0.0.CR1","1.0.0.CR2","1.0.0.CR3","1.0.0.CR4","1.0.0.CR5","1.0.0.Final","1.0.1.Final","1.0.10.Final","1.0.11.Final","1.0.12.Final","1.0.13.Final","1.0.14.Final","1.0.15.Final","1.0.16.Final","1.0.17.Final","1.0.18.Final","1.0.19.Final","1.0.2.Final","1.0.3.Final","1.0.4.Final","1.0.5.Final","1.0.6.Final","1.0.7.Final","1.0.8.Final","1.0.9.Final","1.1.0.Beta1","1.1.0.Beta2","1.1.0.Beta3","1.1.0.Beta4","1.1.0.Beta5","1.1.0.Beta6","1.1.0.Beta7","1.1.0.Beta8","1.1.0.CR1","1.1.0.CR2","1.1.0.CR3","1.1.0.CR4","1.1.0.CR5","1.1.0.CR6","1.1.0.CR7","1.1.0.CR8","1.1.0.Final","1.1.1.Final","1.1.2.Final","1.1.3.Final","1.1.4.Final","1.1.5.Final","1.1.6.Final","1.1.7.Final","1.1.8.Final","1.1.9.Final","1.2.0.Beta1","1.2.0.Beta10","1.2.0.Beta2","1.2.0.Beta3","1.2.0.Beta4","1.2.0.Beta5","1.2.0.Beta6","1.2.0.Beta7","1.2.0.Beta8","1.2.0.Beta9","1.2.0.CR1","1.2.0.Final","1.2.1.Final","1.2.10.Final","1.2.11.Final","1.2.12.Final","1.2.2.Final","1.2.3.Final","1.2.4.Final","1.2.5.Final","1.2.6.Final","1.2.7.Final","1.2.8.Final","1.2.9.Final","1.3.0.Beta1","1.3.0.Beta10","1.3.0.Beta11","1.3.0.Beta12","1.3.0.Beta13","1.3.0.Beta2","1.3.0.Beta3","1.3.0.Beta4","1.3.0.Beta5","1.3.0.Beta6","1.3.0.Beta7","1.3.0.Beta8","1.3.0.Beta9","1.3.0.CR1","1.3.0.CR2","1.3.0.CR3","1.3.0.Final","1.3.1.Final","1.3.10.Final","1.3.11.Final","1.3.12.Final","1.3.13.Final","1.3.14.Final","1.3.15.Final","1.3.16.Final","1.3.17.Final","1.3.18.Final","1.3.19.Final","1.3.2.Final","1.3.20.Final","1.3.21.Final","1.3.22.Final","1.3.23.Final","1.3.24.Final","1.3.25.Final","1.3.26.Final","1.3.27.Final","1.3.28.Final","1.3.29.Final","1.3.3.Final","1.3.30.Final","1.3.31.Final","1.3.32.Final","1.3.33.Final","1.3.4.Final","1.3.5.Final","1.3.6.Final","1.3.7.Final","1.3.8.Final","1.3.9.Final","1.4.0.Beta1","1.4.0.CR1","1.4.0.CR2","1.4.0.CR3","1.4.0.CR4","1.4.0.Final","1.4.1.Final","1.4.10.Final","1.4.11.Final","1.4.12.Final","1.4.13.Final","1.4.14.Final","1.4.15.Final","1.4.16.Final","1.4.17.Final","1.4.18.Final","1.4.19.Final","1.4.2.Final","1.4.20.Final","1.4.21.Final","1.4.22.Final","1.4.23.Final","1.4.24.Final","1.4.25.Final","1.4.26.Final","1.4.27.Final","1.4.28.Final","1.4.3.Final","1.4.4.Final","1.4.5.Final","1.4.6.Final","1.4.7.Final","1.4.8.Final","1.4.9.Final","2.0.0.Alpha1","2.0.0.Beta1","2.0.0.Final","2.0.1.Final","2.0.10.Final","2.0.11.Final","2.0.12.Final","2.0.13.Final","2.0.14.Final","2.0.15.Final","2.0.16.Final","2.0.17.Final","2.0.18.Final","2.0.19.Final","2.0.2.Final","2.0.20.Final","2.0.21.Final","2.0.22.Final","2.0.23.Final","2.0.24.Final","2.0.25.Final","2.0.26.Final","2.0.27.Final","2.0.28.Final","2.0.29.Final","2.0.3.Final","2.0.30.Final","2.0.31.Final","2.0.32.Final","2.0.33.Final","2.0.34.Final","2.0.35.Final","2.0.36.Final","2.0.37.Final","2.0.38.Final","2.0.39.Final","2.0.4.Final","2.0.40.Final","2.0.41.Final","2.0.42.Final","2.0.5.Final","2.0.6.Final","2.0.7.Final","2.0.8.Final","2.0.9.Final","2.1.0.Final","2.1.1.Final","2.1.2.Final","2.1.3.Final","2.1.4.Final","2.1.5.Final","2.1.6.Final","2.1.7.Final","2.1.8.Final","2.2.0.Final","2.2.1.Final","2.2.10.Final","2.2.11.Final","2.2.12.Final","2.2.13.Final","2.2.14.Final","2.2.15.Final","2.2.16.Final","2.2.17.Final","2.2.18.Final","2.2.19.Final","2.2.2.Final","2.2.20.Final","2.2.21.Final","2.2.22.Final","2.2.23.Final","2.2.24.Final","2.2.25.Final","2.2.26.Final","2.2.27.Final","2.2.28.Final","2.2.29.Final","2.2.3.Final","2.2.30.Final","2.2.31.Final","2.2.32.Final","2.2.33.Final","2.2.4.Final","2.2.5.Final","2.2.6.Final","2.2.7.Final","2.2.8.Final","2.2.9.Final"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"io.quarkus.http:quarkus-http-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8.rhlw-00005"}]}],"versions":["3.0.0.Alpha1","3.0.0.Alpha2","3.0.0.Alpha3","3.0.0.Alpha4","3.0.0.Alpha5","3.0.0.Alpha6","3.0.0.Alpha7","3.0.0.Beta1","3.0.0.Beta2","3.0.0.Beta3","3.0.0.Final","3.0.1.Final","3.0.10.Final","3.0.11.Final","3.0.12.Final","3.0.13.Final","3.0.14.Final","3.0.15.Final","3.0.16.Final","3.0.17.Final","3.0.18.Final","3.0.2.Final","3.0.3.Final","3.0.4.Final","3.0.5.Final","3.0.6.Final","3.0.7.Final","3.0.8.Final","3.0.9.Final","3.1.0.Beta1","3.1.0.Beta2","3.1.0.Final","3.1.1.Final","4.0.0","4.0.0.Alpha2","4.0.0.Alpha3","4.0.0.Alpha4","4.1.1","4.1.2","4.1.3","4.1.4","4.1.5","4.1.6","4.1.7","4.1.8"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.33-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.29-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-1.Final_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-xnio-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.33-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.29-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-1.Final_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-xnio-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.33-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.78.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.17-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.29-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-37.Final_redhat_00037.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-1.Final_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.108-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-netty-xnio-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.18-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-1","1.3.5-1","1.3.7-1","1.3.11-1","1.3.16-1","1.3.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.20-1","1.4.21-1","1.4.22-1","1.4.23-1","1.4.23-2build1","1.4.23-3","1.4.23-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.23-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.29-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.8-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2","2.3.8-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-1","2.3.18-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.20-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-2","2.3.20-1","2.3.20-1ubuntu1"]}],"products":[{"vendor":"red hat","product":"openshift serverless"},{"vendor":"red hat","product":"red hat build of apache camel - hawtio 4"},{"vendor":"red hat","product":"red hat build of apache camel 4 for quarkus 3"},{"vendor":"red hat","product":"red hat build of apache camel for spring boot 4"},{"vendor":"red hat","product":"red hat build of apicurio registry 2"},{"vendor":"red hat","product":"red hat build of keycloak"},{"vendor":"red hat","product":"red hat build of optaplanner 8"},{"vendor":"red hat","product":"red hat build of quarkus"},{"vendor":"red hat","product":"red hat build of quarkus 3.8.6.redhat"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat fuse 7"},{"vendor":"red hat","product":"red hat integration camel k 1"},{"vendor":"red hat","product":"red hat integration camel quarkus 2"},{"vendor":"red hat","product":"red hat jboss data grid 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 for rhel 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 for rhel 9"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 on rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat jboss fuse service works 6"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat single sign-on 7"},{"vendor":"red hat","product":"streams for apache kafka"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:4392","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5143","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5144","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5145","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5147","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6437","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3653","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274437","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240828-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3653","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1639","tags":["web"]},{"url":"https://github.com/undertow-io/undertow/pull/1640","tags":["web"]},{"url":"https://github.com/undertow-io/undertow/pull/1641","tags":["web"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2382","tags":["web"]},{"url":"https://github.com/advisories/GHSA-ch7q-gpff-h9hp","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3653.json","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-3653","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0900","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3018","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8761","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12397","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12397.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12397","tags":["advisory"]},{"url":"https://github.com/quarkusio/quarkus-http","tags":["package"]},{"url":"https://github.com/advisories/GHSA-cxrx-q234-m22m","tags":["advisory"]},{"url":"https://access.redhat.com/articles/7073034","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293028","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-26292","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-26833","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27017","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27056","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27078","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27079","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27101","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27181","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27290","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27352","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27353","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5143.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3653","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5971","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27316","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27316","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://nowotarski.info/http2-continuation-flood/","tags":["article"]},{"url":"https://www.kb.cert.org/vuls/id/421644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-29025","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-29025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29025","tags":["advisory"]},{"url":"https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3","tags":["article"]},{"url":"https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5jpm-x58v-624v","tags":["article"]},{"url":"https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-29857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-29857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-30171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-30171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171","tags":["advisory"]},{"url":"https://people.redhat.com/~hkario/marvin/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-30172","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-30172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30172","tags":["advisory"]},{"url":"https://www.bouncycastle.org/latest_releases.html","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-26834","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5144.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-26835","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5145.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-3653","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-3653","title":"Undertow: learningpushhandler can lead to remote memory dos attacks","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T21:21:20.899Z","modified":"2026-11-07T11:32:00.318Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-401"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2024-2322","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T21:21:20Z","modified":"2026-11-07T11:32:00Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-ch7q-gpff-h9hp","title":"Undertow Missing Release of Memory after Effective Lifetime vulnerability","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-09T00:31:40Z","modified":"2024-11-04T22:22:13Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:38:16.477822Z"}],"nvd":[{"id":"CVE-2024-3653","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T22:15:02.527Z","modified":"2026-11-06T14:17:04.327Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-401"],"updated_at":"2026-11-06T16:00:30.581664Z"}],"osv":[{"id":"CVE-2024-3653","title":"Undertow: learningpushhandler can lead to remote memory dos attacks","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T21:21:20.899Z","modified":"2026-11-07T02:30:53.940493845Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-07T03:07:53.293347Z"},{"id":"DEBIAN-CVE-2024-3653","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T22:15:02.527Z","modified":"2026-11-07T09:47:33.330726982Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"GHSA-ch7q-gpff-h9hp","title":"Undertow Missing Release of Memory after Effective Lifetime vulnerability","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-09T00:31:40Z","modified":"2024-11-04T22:35:25.764123Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"RHLW-2026-f6f1fa9b81c3bbbe","title":"Lightwell Security Advisory: quarkus-http-core 4.1.8.rhlw-00005","description":"Red Hat Lightwell has released io.quarkus.http:quarkus-http-core 4.1.8.rhlw-00005 with backported fixes for CVE-2024-12397 and CVE-2024-3653.\n\nCVE-2024-12397: Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling\n\nCVE-2024-3653: Undertow: learningpushhandler can lead to remote memory dos attacks\n\nThis patched artifact is a drop-in replacement for io.quarkus.http:quarkus-http-core 4.1.8 from Maven Central.","status":"published","published":"2026-09-28T20:37:17Z","modified":"2026-10-27T04:13:02.070726384Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2024:5143","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update","status":"published","published":"2024-09-30T19:52:51Z","modified":"2026-10-14T10:04:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5144","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update","status":"published","published":"2024-09-30T19:53:02Z","modified":"2026-10-14T10:04:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5145","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update","status":"published","published":"2026-08-05T10:20:46Z","modified":"2026-10-14T10:04:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2024-3653","description":"A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.","status":"published","published":"2024-07-08T22:15:00Z","modified":"2026-10-17T12:56:36.778298944Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:50.784131Z"},{"id":"CLSA-2025-1766534903","title":"TuxCare security update for io.undertow:undertow-core (4 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.2.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:10.364318075Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1782349133","title":"TuxCare security update for io.undertow:undertow-core (5 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 5 CVEs. Fixed in 2.3.0.Final-tuxcare.3.","status":"published","published":"2026-08-04T14:52:39Z","modified":"2026-11-02T19:45:41.562440168Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1786429829","title":"TuxCare security update for io.undertow:undertow-core (1 CVE)","description":"TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.6.","status":"published","published":"2026-08-11T06:30:29Z","modified":"2026-11-02T19:45:54.628234412Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1793853308","title":"TuxCare security update for io.undertow:undertow-core (6 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 1.4.27.Final-tuxcare.3.","status":"published","published":"2026-11-05T05:35:09Z","modified":"2026-11-05T07:00:39.180943488Z","updated_at":"2026-11-05T07:10:31.343344Z"},{"id":"CLSA-2026-1794162511","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.0.26.Final-tuxcare.2.","status":"published","published":"2026-11-08T19:28:32Z","modified":"2026-11-09T01:45:04.238670461Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794235099","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.2.7.Final-tuxcare.1.","status":"published","published":"2026-11-09T15:38:19Z","modified":"2026-11-09T19:15:07.333580871Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794235365","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.1.7.Final-tuxcare.1.","status":"published","published":"2026-11-09T15:42:46Z","modified":"2026-11-09T19:15:06.838072864Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794235562","title":"TuxCare security update for io.undertow:undertow-core (10 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 10 CVEs. Fixed in 2.0.32.Final-tuxcare.1.","status":"published","published":"2026-11-09T15:46:03Z","modified":"2026-11-09T19:15:10.533653822Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794235949","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.1.4.Final-tuxcare.1.","status":"published","published":"2026-11-09T15:52:30Z","modified":"2026-11-09T19:15:07.832569146Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794236374","title":"TuxCare security update for io.undertow:undertow-core (12 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 12 CVEs. Fixed in 2.2.20.Final-tuxcare.1.","status":"published","published":"2026-11-09T15:59:35Z","modified":"2026-11-09T19:15:06.836645936Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794236816","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.2.17.Final-tuxcare.1.","status":"published","published":"2026-11-09T16:06:57Z","modified":"2026-11-09T19:15:09.645847032Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794246287","title":"TuxCare security update for io.undertow:undertow-core (5 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 5 CVEs. Fixed in 2.2.24.Final-tuxcare.2.","status":"published","published":"2026-11-09T18:44:47Z","modified":"2026-11-10T01:15:04.347511323Z","updated_at":"2026-11-10T01:43:20.132342Z"},{"id":"CLSA-2026-1794246653","title":"TuxCare security update for io.undertow:undertow-core (11 CVEs)","description":"TuxCare rebuilt io.undertow:undertow-core to address 11 CVEs. Fixed in 2.2.28.Final-tuxcare.1.","status":"published","published":"2026-11-09T18:50:54Z","modified":"2026-11-10T01:15:04.450730764Z","updated_at":"2026-11-10T01:43:20.132342Z"}]}}