{"action":"Upgrade io.undertow:undertow-core to 2.2.31.Final (2.2.x) or 2.3.12.Final (2.3.x) or later.","affected":[{"fixed":"2.3.12.Final","introduced":"2.3.0.Final"},{"fixed":"2.2.31.Final","introduced":"0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2024-1635"],"ecosystem":"Maven","epss":0.04572,"exploited":false,"fixed_versions":["2.3.12.Final","2.2.31.Final"],"ghsa_id":"GHSA-w6qf-42m7-vh68","id":"tcs_01M5N9FRJV2SHM665H4771QKTJ","modified_at":"2025-04-28T16:00:35.045525Z","published_at":"2024-02-20T00:30:36Z","references":["https://osv.dev/vulnerability/GHSA-w6qf-42m7-vh68","https://nvd.nist.gov/vuln/detail/CVE-2024-1635","https://github.com/undertow-io/undertow/commit/7d388c5aae9b82afb63f24e3b6a2044838dfb4de","https://github.com/undertow-io/undertow/commit/3cdb104e225f34547ce9fd6eb8799eb68e040f19","https://security.netapp.com/advisory/ntap-20240322-0007","https://github.com/undertow-io/undertow","https://bugzilla.redhat.com/show_bug.cgi?id=2264928","https://access.redhat.com/security/cve/CVE-2024-1635","https://access.redhat.com/errata/RHSA-2025:4226","https://access.redhat.com/errata/RHSA-2024:4884","https://access.redhat.com/errata/RHSA-2024:3354","https://access.redhat.com/errata/RHSA-2024:1866","https://access.redhat.com/errata/RHSA-2024:1864","https://access.redhat.com/errata/RHSA-2024:1862","https://access.redhat.com/errata/RHSA-2024:1861","https://access.redhat.com/errata/RHSA-2024:1860","https://access.redhat.com/errata/RHSA-2024:1677","https://access.redhat.com/errata/RHSA-2024:1676","https://access.redhat.com/errata/RHSA-2024:1675","https://access.redhat.com/errata/RHSA-2024:1674"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w6qf-42m7-vh68","url":"https://osv.dev/vulnerability/GHSA-w6qf-42m7-vh68"}],"summary":"Undertow Uncontrolled Resource Consumption Vulnerability"}