{"action":"Upgrade io.undertow:undertow-core to 2.2.0.Final or later.","affected":[{"fixed":"2.2.0.Final","introduced":"0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2020-10687"],"ecosystem":"Maven","epss":0.01231,"exploited":false,"fixed_versions":["2.2.0.Final"],"ghsa_id":"GHSA-p9w3-gwc2-cr49","id":"tcs_01M5N976N7T99G4TCFJZHEBQB7","modified_at":"2024-02-17T05:34:29.176855Z","published_at":"2021-04-30T17:28:52Z","references":["https://osv.dev/vulnerability/GHSA-p9w3-gwc2-cr49","https://nvd.nist.gov/vuln/detail/CVE-2020-10687","https://bugzilla.redhat.com/show_bug.cgi?id=1785049","https://lists.apache.org/thread.html/r6603513ea8afbf6857fd77ca5888ec8385d0af493baa4250e28c351c@%3Cdev.cxf.apache.org%3E","https://security.netapp.com/advisory/ntap-20220210-0015"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-p9w3-gwc2-cr49","url":"https://osv.dev/vulnerability/GHSA-p9w3-gwc2-cr49"}],"summary":"HTTP Request Smuggling in Undertow"}