{"action":"Upgrade io.undertow:undertow-core to 2.2.34.Final (2.2.x) or 2.3.15.Final (2.3.x) or later.","affected":[{"fixed":"2.3.15.Final","introduced":"2.3.0.Alpha1"},{"fixed":"2.2.34.Final","introduced":"0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2024-5971"],"ecosystem":"Maven","epss":0.02921,"exploited":false,"fixed_versions":["2.3.15.Final","2.2.34.Final"],"ghsa_id":"GHSA-xpp6-8r3j-ww43","id":"tcs_01M5N9JQX4SWTTC5T7CWHEAZQP","modified_at":"2024-09-30T20:08:28.287073Z","published_at":"2024-07-08T21:31:40Z","references":["https://osv.dev/vulnerability/GHSA-xpp6-8r3j-ww43","https://nvd.nist.gov/vuln/detail/CVE-2024-5971","https://github.com/undertow-io/undertow/pull/1638","https://github.com/undertow-io/undertow/pull/1640","https://github.com/undertow-io/undertow/pull/1641","https://access.redhat.com/errata/RHSA-2024:4392","https://access.redhat.com/errata/RHSA-2024:4884","https://access.redhat.com/errata/RHSA-2024:5143","https://access.redhat.com/errata/RHSA-2024:5144","https://access.redhat.com/errata/RHSA-2024:5145","https://access.redhat.com/errata/RHSA-2024:5147","https://access.redhat.com/errata/RHSA-2024:6508","https://access.redhat.com/errata/RHSA-2024:6883","https://access.redhat.com/security/cve/CVE-2024-5971","https://bugzilla.redhat.com/show_bug.cgi?id=2292211","https://github.com/undertow-io/undertow","https://issues.redhat.com/browse/UNDERTOW-2413"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xpp6-8r3j-ww43","url":"https://osv.dev/vulnerability/GHSA-xpp6-8r3j-ww43"}],"summary":"Undertow Denial of Service vulnerability"}