{"action":"Upgrade io.undertow:undertow-core to 1.3.31.Final (1.3.x), 1.4.17.Final (1.4.x) or 2.0.0.Alpha2 (2.0.x) or later.","affected":[{"fixed":"1.4.17.Final","introduced":"1.4.0"},{"fixed":"1.3.31.Final","introduced":"1.3.0"},{"fixed":"2.0.0.Alpha2","introduced":"2.0.0.Alpha1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2017-7559"],"ecosystem":"Maven","epss":0.01911,"exploited":false,"fixed_versions":["1.4.17.Final","1.3.31.Final","2.0.0.Alpha2"],"ghsa_id":"GHSA-rj76-h87p-r3wf","id":"tcs_01M5N9BYR5XVN4R2G8D2Z516Z8","modified_at":"2023-11-08T03:59:25.234942Z","published_at":"2022-05-13T01:36:16Z","references":["https://osv.dev/vulnerability/GHSA-rj76-h87p-r3wf","https://nvd.nist.gov/vuln/detail/CVE-2017-7559","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7559","https://github.com/undertow-io/undertow","https://issues.jboss.org/browse/UNDERTOW-1251"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rj76-h87p-r3wf","url":"https://osv.dev/vulnerability/GHSA-rj76-h87p-r3wf"}],"summary":"Undertow vulnerable to Request Smuggling"}