{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:acfa93e7-0271-5efa-939f-06e67bfab8fd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "undertow-examples", "purl": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2", "type": "library", "group": "io.undertow", "bom-ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2", "version": "2.3.17.Final-tuxcare.2", "pedigree": { "ancestors": [ { "name": "undertow-examples", "purl": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final", "type": "library", "group": "io.undertow", "version": "2.3.17.Final" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-7816", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:ab7d2152-b0b2-5988-9474-67352ae6f91c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-7816 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2016-7046", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d3823881-f6f3-5782-a696-93297ab0bcbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7046 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2017-12165", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:9347d0e1-2c42-533b-8071-dc85cc36fe07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12165 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2017-12196", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:17cd0442-7d32-5e98-9cf0-b93090bd6182", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12196 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2017-2666", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:9c9697ac-7561-5f46-87c9-1f79fa295809", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2666 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2017-2670", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:90965731-22d8-5cd8-83fa-463a75eae253", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2670 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2017-7559", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d5a24299-d7a5-50d3-a2f4-c76369d8a479", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7559 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2018-1114", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:55a36243-8374-5bf2-8342-29b96f9faa45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1114 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2018-14642", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:12d91f09-8674-50b1-8565-deea9e5b54f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14642 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2019-10184", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d50db66a-9158-5c44-a5da-f8534c293d63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10184 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2019-10212", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:34f681b6-0584-5b2f-8e68-1c79eadb1411", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10212 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2019-14888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:a98ac144-1b2d-58e7-93c1-514783173126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2019-3888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:c8cc49d0-be2f-5983-bc1f-0cfd4b840a6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-10687", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:80a87f13-b245-54ec-88ad-fa14dd0efb54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10687 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-10705", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:55a73e1c-3bb7-52d6-b4b5-434fd53765ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10705 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-10719", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:c5a891a2-f292-5f3b-a746-dec38b40dcc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10719 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-1745", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:0cde8a16-3824-5b5a-932d-2ed57f08a39b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1745 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-1757", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:79ca1f9e-a2b0-5d77-9d1f-19e90ebd96b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1757 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2020-27782", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:4304f367-68a9-5009-8aa3-07d02c17052d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27782 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2021-20220", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:231951a8-64bd-52a5-b851-bf75919d90d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-20220 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2021-3597", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:7ccdf20c-5baf-5283-8d13-8830e66d4a67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3597 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2021-3629", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:ca259fac-bc67-54f6-8482-f882d54f38f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3629 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2021-3690", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:93409a49-cafe-5428-a231-a063e1e11e0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3690 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2021-3859", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:ae245729-4340-52f9-8c50-2e343537ac3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3859 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2022-2053", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:2c9d74bd-9d6a-56e4-919e-3597ecc25db5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2053 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2022-4492", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d267c479-8f34-5f60-90da-40f6fc5fa437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-4492 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2023-1108", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:85256d20-de65-5be2-aa51-7ebb5b0ece7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-1108 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2023-1973", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:78636048-845e-57ea-98d1-999f0ad823cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-1973 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2023-3223", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:47b6a2e2-b4ef-50cc-9e48-70ca5dba79da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-3223 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2023-4639", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d0af6823-956b-5b07-b51b-a59d4ee7157d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-4639 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-1459", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:1b80287e-af35-5951-abaa-1caf6bc1c377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1459 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-1635", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:96c0b737-1163-57c4-ac18-e38a2c64cf41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-1635 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-3653", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:7e9ad24e-d383-5262-8c85-58a69f4c74c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-3653 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-3884", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:40ed34fa-57d6-5079-9a1a-a575a2530d2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-4027", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:ff67bab4-366d-555e-b2dc-8475a8538b1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-4109", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:035a7d78-83a3-52c5-a671-a8d8d4e01d50", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-examples 2.3.17.Final-tuxcare.2." } }, { "id": "CVE-2024-5971", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:8d7e3e75-7cb7-54d1-b7d6-9dd9154410b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-5971 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-6162", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:c6c3caf9-db54-57a7-9de0-9000077e255b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6162 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2024-7885", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:a65e4535-2116-5197-8434-83a6c0e9f940", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7885 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2025-12543", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:f0328ace-1d1d-5e7e-90d0-b57b753990ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2025-9784", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:6bbacf4a-c642-5ace-a910-7571c1929d00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2026-28367", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:e65d6f55-e33b-504a-a8e9-bf1f03a69c0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28367 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2026-28368", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:a89e6d20-6270-54c9-99af-250d6ed73635", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28368 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } }, { "id": "CVE-2026-28369", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:435c74a3-5252-53c3-965a-158c4e4448e2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-28369 does not affect version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples. already_fixed \u2014 The target repository (Undertow 2.3.17.Final) already contains UNDERTOW-1774, a fix from February 2020 that causes the HTTP parser to reject requests where header field-names start with whitespace characters. This fix addresses the core vulnerability described in CVE-2026-28369 by throwing BadRequestException when such malformed headers are encountered, preventing request smuggling attacks.", "justification": "code_not_present" } }, { "id": "CVE-2026-3260", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ], "bom-ref": "urn:uuid:d739ee82-a0f5-5b60-8064-4a32f83441c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-3260 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-examples." } } ], "dependencies": [ { "ref": "pkg:maven/io.undertow/undertow-examples@2.3.17.Final-tuxcare.2" } ] }