{"action":"Upgrade io.undertow:undertow-core to 1.3.31 (1.3.x) or 1.4.17 (1.4.x) or later.","affected":[{"fixed":"1.3.31","introduced":"0"},{"fixed":"1.4.17","introduced":"1.4.0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2017-2666"],"ecosystem":"Maven","epss":0.03095,"exploited":false,"fixed_versions":["1.3.31","1.4.17"],"ghsa_id":"GHSA-mcfm-h73v-635m","id":"tcs_01M5N94WGEJPW4AC40S1R5T8MR","modified_at":"2023-11-08T03:59:19.673972Z","published_at":"2018-10-19T16:55:14Z","references":["https://osv.dev/vulnerability/GHSA-mcfm-h73v-635m","https://nvd.nist.gov/vuln/detail/CVE-2017-2666","https://github.com/advisories/GHSA-mcfm-h73v-635m"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mcfm-h73v-635m","url":"https://osv.dev/vulnerability/GHSA-mcfm-h73v-635m"}],"summary":"Undertow-core vulnerable to HTTP Request Smuggling"}