{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"undertow","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NQB9FZT9YWW9JRQK4T40YY","modified_at":"2026-11-07T09:47:24.456697557Z","published_at":"2026-10-21T16:17:33.173Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-114370","https://security-tracker.debian.org/tracker/CVE-2026-114370"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-114370","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-114370"}],"summary":"A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. The issue occurs because the mechanism us"}