{
  "@id": "urn:uuid:733d730a-849b-493b-9b29-401b89e48c71",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 7,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T10:52:10.332998+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:13:36.432303+00:00",
      "status_notes": "Vulnerability CVE-2014-7816 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2014-7816"
      },
      "action_statement": "Vulnerability CVE-2014-7816 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:13:36.432303+00:00",
      "status_notes": "Vulnerability CVE-2016-7046 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2016-7046"
      },
      "action_statement": "Vulnerability CVE-2016-7046 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:13:36.432303+00:00",
      "status_notes": "Vulnerability CVE-2017-12165 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2017-12165"
      },
      "action_statement": "Vulnerability CVE-2017-12165 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2017-12196 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2017-12196"
      },
      "action_statement": "Vulnerability CVE-2017-12196 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:13:36.432303+00:00",
      "status_notes": "Vulnerability CVE-2017-2666 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2017-2666"
      },
      "action_statement": "Vulnerability CVE-2017-2666 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T01:13:36.432303+00:00",
      "status_notes": "Vulnerability CVE-2017-2670 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2017-2670"
      },
      "action_statement": "Vulnerability CVE-2017-2670 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T10:52:10.332998+00:00",
      "status_notes": "Vulnerability CVE-2017-7559 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2017-7559"
      },
      "action_statement": "Vulnerability CVE-2017-7559 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2018-1114 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2018-1114"
      },
      "action_statement": "Vulnerability CVE-2018-1114 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2018-14642 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2018-14642"
      },
      "action_statement": "Vulnerability CVE-2018-14642 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2019-10184 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2019-10184"
      },
      "action_statement": "Vulnerability CVE-2019-10184 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2019-10212 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2019-10212"
      },
      "action_statement": "Vulnerability CVE-2019-10212 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2019-14888 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2019-14888"
      },
      "action_statement": "Vulnerability CVE-2019-14888 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2019-3888 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2019-3888"
      },
      "action_statement": "Vulnerability CVE-2019-3888 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2020-10687 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-10687"
      },
      "action_statement": "Vulnerability CVE-2020-10687 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-10705 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-10705"
      },
      "action_statement": "Vulnerability CVE-2020-10705 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-10719 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-10719"
      },
      "action_statement": "Vulnerability CVE-2020-10719 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-1745 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-1745"
      },
      "action_statement": "Vulnerability CVE-2020-1745 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-1757 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-1757"
      },
      "action_statement": "Vulnerability CVE-2020-1757 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-27782 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2020-27782"
      },
      "action_statement": "Vulnerability CVE-2020-27782 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2021-20220 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2021-20220"
      },
      "action_statement": "Vulnerability CVE-2021-20220 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-3597 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2021-3597"
      },
      "action_statement": "Vulnerability CVE-2021-3597 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-3629 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2021-3629"
      },
      "action_statement": "Vulnerability CVE-2021-3629 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-3690 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2021-3690"
      },
      "action_statement": "Vulnerability CVE-2021-3690 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-3859 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2021-3859"
      },
      "action_statement": "Vulnerability CVE-2021-3859 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2022-2053 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2022-2053"
      },
      "action_statement": "Vulnerability CVE-2022-2053 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2022-4492 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2022-4492"
      },
      "action_statement": "Vulnerability CVE-2022-4492 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2023-1108 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2023-1108"
      },
      "action_statement": "Vulnerability CVE-2023-1108 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2023-1973 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2023-1973"
      },
      "action_statement": "Vulnerability CVE-2023-1973 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T23:49:59.024011+00:00",
      "status_notes": "Vulnerability CVE-2023-3223 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2023-3223"
      },
      "action_statement": "Vulnerability CVE-2023-3223 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2023-4639 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2023-4639"
      },
      "action_statement": "Vulnerability CVE-2023-4639 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2024-1459 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-1459"
      },
      "action_statement": "Vulnerability CVE-2024-1459 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2024-1635 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-1635"
      },
      "action_statement": "Vulnerability CVE-2024-1635 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2024-3653 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-3653"
      },
      "action_statement": "Vulnerability CVE-2024-3653 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-3884 is fixed in version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-3884"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-4027 is fixed in version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-4027"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-20T12:46:51.138394+00:00",
      "status_notes": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-parser-generator 2.3.18.Final-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2024-4109"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2024-5971 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-5971"
      },
      "action_statement": "Vulnerability CVE-2024-5971 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:54:14.665991+00:00",
      "status_notes": "Vulnerability CVE-2024-6162 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-6162"
      },
      "action_statement": "Vulnerability CVE-2024-6162 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2024-7885 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2024-7885"
      },
      "action_statement": "Vulnerability CVE-2024-7885 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-12543 is fixed in version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2025-12543"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-9784 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator, and is fixed in 2.3.18.Final-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2025-9784"
      },
      "action_statement": "Vulnerability CVE-2025-9784 affects version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator, and is fixed in 2.3.18.Final-tuxcare.3."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-28367 does not affect version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator. Version 2.3.18.Final is not vulnerable. Summary: The target repository (Undertow 2.3.18.Final) already contains all security fixes for CVE-2026-28367. The vulnerability that allowed using `\\r\\r\\r` as a header block terminator for request smuggling has been mitigated through multiple validation layers. [terminalized not_affected from patch_application_manual/not_vulnerable]",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-28367"
      },
      "impact_statement": "Version 2.3.18.Final is not vulnerable. Summary: The target repository (Undertow 2.3.18.Final) already contains all security fixes for CVE-2026-28367. The vulnerability that allowed using `\\r\\r\\r` as a header block terminator for request smuggling has been mitigated through multiple validation layers. [terminalized not_affected from patch_application_manual/not_vulnerable]"
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-28368 does not affect version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator. Version 2.3.18.Final is not vulnerable. Summary: The target repository (Undertow 2.3.18.Final) is NOT vulnerable to CVE-2026-28368. The security patch preventing HTTP request smuggling through header parsing validation was applied in commit 1e7264781 on March 30, 2017, well before the current version. All validation mechanisms described in the patch are present and active in the codebase. [terminalized not_affected from patch_application_manual/not_vulnerable]",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-28368"
      },
      "impact_statement": "Version 2.3.18.Final is not vulnerable. Summary: The target repository (Undertow 2.3.18.Final) is NOT vulnerable to CVE-2026-28368. The security patch preventing HTTP request smuggling through header parsing validation was applied in commit 1e7264781 on March 30, 2017, well before the current version. All validation mechanisms described in the patch are present and active in the codebase. [terminalized not_affected from patch_application_manual/not_vulnerable]"
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-28369 does not affect version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator. Version 2.3.18.Final is not affected by CVE-2026-28369: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 80b34f852a3fb8fc39309773cc739d05187381d8\". No backport needed.",
      "vulnerability": {
        "name": "CVE-2026-28369"
      },
      "impact_statement": "Version 2.3.18.Final is not affected by CVE-2026-28369: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 80b34f852a3fb8fc39309773cc739d05187381d8\". No backport needed."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/io.undertow/undertow-parser-generator@2.3.18.Final-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-3260 is fixed in version 2.3.18.Final-tuxcare.2 of io.undertow:undertow-parser-generator.",
      "vulnerability": {
        "name": "CVE-2026-3260"
      }
    }
  ]
}
