{ "@id": "urn:uuid:2684560c-2f8a-4025-8681-170cb19ec192", "role": "Document Creator", "author": "https://tuxcare.com", "version": 7, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T18:48:55.110121+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2014-7816 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2014-7816" }, "action_statement": "Vulnerability CVE-2014-7816 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2016-7046 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2016-7046" }, "action_statement": "Vulnerability CVE-2016-7046 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-12165 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2017-12165" }, "action_statement": "Vulnerability CVE-2017-12165 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2017-12196 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2017-12196" }, "action_statement": "Vulnerability CVE-2017-12196 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2666 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2017-2666" }, "action_statement": "Vulnerability CVE-2017-2666 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2670 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2017-2670" }, "action_statement": "Vulnerability CVE-2017-2670 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T10:52:10.332998+00:00", "status_notes": "Vulnerability CVE-2017-7559 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2017-7559" }, "action_statement": "Vulnerability CVE-2017-7559 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2018-1114 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2018-1114" }, "action_statement": "Vulnerability CVE-2018-1114 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2018-14642 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2018-14642" }, "action_statement": "Vulnerability CVE-2018-14642 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-10212 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2019-10212" }, "action_statement": "Vulnerability CVE-2019-10212 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-14888 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2019-14888" }, "action_statement": "Vulnerability CVE-2019-14888 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-3888 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2019-3888" }, "action_statement": "Vulnerability CVE-2019-3888 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2020-10687 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-10687" }, "action_statement": "Vulnerability CVE-2020-10687 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-10705 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-10705" }, "action_statement": "Vulnerability CVE-2020-10705 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-10719 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-10719" }, "action_statement": "Vulnerability CVE-2020-10719 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1745 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-1745" }, "action_statement": "Vulnerability CVE-2020-1745 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1757 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-1757" }, "action_statement": "Vulnerability CVE-2020-1757 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-27782 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2020-27782" }, "action_statement": "Vulnerability CVE-2020-27782 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2021-20220 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2021-20220" }, "action_statement": "Vulnerability CVE-2021-20220 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3597 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2021-3597" }, "action_statement": "Vulnerability CVE-2021-3597 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3629 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2021-3629" }, "action_statement": "Vulnerability CVE-2021-3629 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3690 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2021-3690" }, "action_statement": "Vulnerability CVE-2021-3690 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3859 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2021-3859" }, "action_statement": "Vulnerability CVE-2021-3859 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-1259 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2022-1259" }, "action_statement": "Vulnerability CVE-2022-1259 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-1319 does not affect version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks. already_fixed \u2014 CVE-2022-1319 (UNDERTOW-2060) has been fixed in the target repository. The fix commit eefae287893fc79736c9573975a9c96c3161cab0 from April 8, 2022 is present and contains both required defense mechanisms: (1) END_RESPONSE reuse flag changed from 1 to 0 to signal connection non-reusability after errors, and (2) removal of duplicate handleBadRequest() call to prevent sending two response packets.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-1319" }, "impact_statement": "already_fixed \u2014 CVE-2022-1319 (UNDERTOW-2060) has been fixed in the target repository. The fix commit eefae287893fc79736c9573975a9c96c3161cab0 from April 8, 2022 is present and contains both required defense mechanisms: (1) END_RESPONSE reuse flag changed from 1 to 0 to signal connection non-reusability after errors, and (2) removal of duplicate handleBadRequest() call to prevent sending two response packets." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-2053 does not affect version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks. already_fixed \u2014 CVE-2022-2053 has already been fixed in the target repository. The fix (UNDERTOW-2133) was backported to all tuxcare-current branches. The code at AjpServerRequestConduit.java:206-207 contains the specific exception handler that catches RequestTooBigException and re-throws it, preventing the generic exception handler from silently closing the connection. This allows upper layers to send proper ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-2053" }, "impact_statement": "already_fixed \u2014 CVE-2022-2053 has already been fixed in the target repository. The fix (UNDERTOW-2133) was backported to all tuxcare-current branches. The code at AjpServerRequestConduit.java:206-207 contains the specific exception handler that catches RequestTooBigException and re-throws it, preventing the generic exception handler from silently closing the connection. This allows upper layers to send proper ..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-2764 does not affect version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks. already_fixed \u2014 CVE-2022-2764 (UNDERTOW-2048) has already been fixed in the target repository. The fix was applied via commits 5f3b1f269, 05ab8777e, and f60972d29 on the master branch, implementing timeout protection for blocking read operations in UndertowInputStream.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-2764" }, "impact_statement": "already_fixed \u2014 CVE-2022-2764 (UNDERTOW-2048) has already been fixed in the target repository. The fix was applied via commits 5f3b1f269, 05ab8777e, and f60972d29 on the master branch, implementing timeout protection for blocking read operations in UndertowInputStream." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-4492 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2022-4492" }, "action_statement": "Vulnerability CVE-2022-4492 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-1108 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2023-1108" }, "action_statement": "Vulnerability CVE-2023-1108 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-1973 is fixed in version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2023-1973" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-4639 is fixed in version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2023-4639" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1459 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2024-1459" }, "action_statement": "Vulnerability CVE-2024-1459 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1635 is fixed in version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2024-1635" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-3653 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2024-3653" }, "action_statement": "Vulnerability CVE-2024-3653 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-3884 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2024-3884" }, "action_statement": "Vulnerability CVE-2024-3884 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-4027 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2024-4027" }, "action_statement": "Vulnerability CVE-2024-4027 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-benchmarks 2.3.0.Final-tuxcare.2.", "vulnerability": { "name": "CVE-2024-4109" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-5971 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2024-5971" }, "action_statement": "Vulnerability CVE-2024-5971 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks, and is fixed in 2.3.0.Final-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6162 is fixed in version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2024-6162" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-7885 is fixed in version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2024-7885" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-12543 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2025-12543" }, "action_statement": "Vulnerability CVE-2025-12543 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-9784 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2025-9784" }, "action_statement": "Vulnerability CVE-2025-9784 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.0.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-3260 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks.", "vulnerability": { "name": "CVE-2026-3260" }, "action_statement": "Vulnerability CVE-2026-3260 affects version 2.3.0.Final-tuxcare.2 of io.undertow:undertow-benchmarks." } ] }