{"action":"Upgrade io.undertow:undertow-core to 2.2.38.Final (2.2.x) or 2.3.20.Final (2.3.x) or later.","affected":[{"fixed":"2.2.38.Final","introduced":"0"},{"fixed":"2.3.20.Final","introduced":"2.3.0.Alpha1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2025-9784"],"ecosystem":"Maven","epss":0.02325,"exploited":false,"fixed_versions":["2.2.38.Final","2.3.20.Final"],"ghsa_id":"GHSA-95h4-w6j8-2rp8","id":"tcs_01M5N8P6E9BTBFN1TVGBWPNYVR","modified_at":"2026-10-06T00:45:07.202556119Z","published_at":"2025-09-02T15:31:08Z","references":["https://osv.dev/vulnerability/GHSA-95h4-w6j8-2rp8","https://nvd.nist.gov/vuln/detail/CVE-2025-9784","https://github.com/undertow-io/undertow/pull/1805","https://github.com/undertow-io/undertow/pull/1804","https://github.com/undertow-io/undertow/pull/1803","https://github.com/undertow-io/undertow/pull/1802","https://github.com/undertow-io/undertow/pull/1778","https://www.kb.cert.org/vuls/id/767506","https://kb.cert.org/vuls/id/767506","https://issues.redhat.com/browse/UNDERTOW-2598","https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","https://github.com/undertow-io/undertow","https://bugzilla.redhat.com/show_bug.cgi?id=2392306","https://access.redhat.com/security/cve/CVE-2025-9784","https://access.redhat.com/errata/RHSA-2026:76134","https://access.redhat.com/errata/RHSA-2026:76132","https://access.redhat.com/errata/RHSA-2026:4924","https://access.redhat.com/errata/RHSA-2026:4917","https://access.redhat.com/errata/RHSA-2026:4916","https://access.redhat.com/errata/RHSA-2026:4915","https://access.redhat.com/errata/RHSA-2026:3892","https://access.redhat.com/errata/RHSA-2026:3891","https://access.redhat.com/errata/RHSA-2026:3889","https://access.redhat.com/errata/RHSA-2026:33372","https://access.redhat.com/errata/RHSA-2026:33371","https://access.redhat.com/errata/RHSA-2026:0386","https://access.redhat.com/errata/RHSA-2026:0384","https://access.redhat.com/errata/RHSA-2026:0383","https://access.redhat.com/errata/RHSA-2025:23143"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-95h4-w6j8-2rp8","url":"https://osv.dev/vulnerability/GHSA-95h4-w6j8-2rp8"}],"summary":"Undertow MadeYouReset HTTP/2 DDoS Vulnerability"}