{"action":"Upgrade io.undertow:undertow-core to 2.2.19.Final (2.2.x) or 2.3.0.Alpha2 (2.3.x) or later.","affected":[{"fixed":"2.2.19.Final","introduced":"0"},{"fixed":"2.3.0.Alpha2","introduced":"2.3.0.Alpha1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2022-2053"],"ecosystem":"Maven","epss":0.01093,"exploited":false,"fixed_versions":["2.2.19.Final","2.3.0.Alpha2"],"ghsa_id":"GHSA-95rf-557x-44g5","id":"tcs_01M5N8P7G674P4172192FY9PCG","modified_at":"2023-11-08T04:08:02.254720Z","published_at":"2022-08-06T00:00:46Z","references":["https://osv.dev/vulnerability/GHSA-95rf-557x-44g5","https://nvd.nist.gov/vuln/detail/CVE-2022-2053","https://github.com/undertow-io/undertow/pull/1350","https://bugzilla.redhat.com/show_bug.cgi?id=2095862&comment#0","https://github.com/undertow-io/undertow","https://issues.redhat.com/browse/UNDERTOW-2133"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-95rf-557x-44g5","url":"https://osv.dev/vulnerability/GHSA-95rf-557x-44g5"}],"summary":"Undertow vulnerable to Dos via Large AJP request"}