{ "@id": "urn:uuid:a040bdb9-712f-4247-8c2e-b17f37db1bea", "role": "Document Creator", "author": "https://tuxcare.com", "version": 17, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-01T04:15:00.311363+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2014-7816" }, "action_statement": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2016-7046" }, "action_statement": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-12165" }, "action_statement": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-31T23:44:00.212234+00:00", "status_notes": "Vulnerability CVE-2017-12196 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2017-12196 does not affect Undertow 2.3.10.Final. The vulnerability (missing URI validation in Digest authentication allowing MITM attacks) was fixed in upstream commits facb33a5 and 8804170c (Oct-Dec 2017). These fixes were already present in upstream version 2.3.10.Final when TuxCare onboarded it. The target contains the complete URI validation logic at DigestAuthenticationMechanism.java:...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-12196" }, "impact_statement": "not_affected \u2014 CVE-2017-12196 does not affect Undertow 2.3.10.Final. The vulnerability (missing URI validation in Digest authentication allowing MITM attacks) was fixed in upstream commits facb33a5 and 8804170c (Oct-Dec 2017). These fixes were already present in upstream version 2.3.10.Final when TuxCare onboarded it. The target contains the complete URI validation logic at DigestAuthenticationMechanism.java:..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-2666" }, "action_statement": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-2670" }, "action_statement": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-29T10:52:10.332998+00:00", "status_notes": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-7559" }, "action_statement": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T00:17:00.126158+00:00", "status_notes": "Vulnerability CVE-2018-1114 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2018-1114 is NOT present in this target. The vulnerability involved a file descriptor leak in URLResource.getLastModified() when handling JAR URLs - JarURLConnection.getLastModified() opened file descriptors that were only closed on finalization. The upstream fix (commit 882d5884f by Norito Agetsuma, April 2018) was already included in Undertow 2.3.10.Final when TuxCare onboarded it. The fi...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-1114" }, "impact_statement": "not_affected \u2014 CVE-2018-1114 is NOT present in this target. The vulnerability involved a file descriptor leak in URLResource.getLastModified() when handling JAR URLs - JarURLConnection.getLastModified() opened file descriptors that were only closed on finalization. The upstream fix (commit 882d5884f by Norito Agetsuma, April 2018) was already included in Undertow 2.3.10.Final when TuxCare onboarded it. The fi..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T04:15:00.311363+00:00", "status_notes": "Vulnerability CVE-2018-14642 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2018-14642 (information leak via uninitialized buffer in HTTP response) is NOT present in the target repository. The vulnerable code pattern was fixed by upstream Undertow developer Stuart Douglas in commit a83b047d5 (UNDERTOW-1412) on 2018-09-13. This fix was already included in the upstream 2.3.10.Final release (2023-10-17), which TuxCare subsequently onboarded. The target's HttpResponseC...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-14642" }, "impact_statement": "not_affected \u2014 CVE-2018-14642 (information leak via uninitialized buffer in HTTP response) is NOT present in the target repository. The vulnerable code pattern was fixed by upstream Undertow developer Stuart Douglas in commit a83b047d5 (UNDERTOW-1412) on 2018-09-13. This fix was already included in the upstream 2.3.10.Final release (2023-10-17), which TuxCare subsequently onboarded. The target's HttpResponseC..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-10184 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-10184" }, "action_statement": "Vulnerability CVE-2019-10184 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-10212" }, "action_statement": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-14888" }, "action_statement": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-3888" }, "action_statement": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T03:25:00.374934+00:00", "status_notes": "Vulnerability CVE-2020-10687 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2020-10687 addresses HTTP request smuggling via invalid characters in HTTP/1.x and HTTP/2. The target version 2.3.10.Final contains all three fix components: (1) HTTP/1.x character validation in paths/queries (ALLOWED_TARGET_CHARACTER checks), (2) HTTP/2 pseudo-header validation (:path, :scheme, :authority, :method), and (3) whitespace rejection in header field-names. All fixes were authore...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10687" }, "impact_statement": "not_affected \u2014 CVE-2020-10687 addresses HTTP request smuggling via invalid characters in HTTP/1.x and HTTP/2. The target version 2.3.10.Final contains all three fix components: (1) HTTP/1.x character validation in paths/queries (ALLOWED_TARGET_CHARACTER checks), (2) HTTP/2 pseudo-header validation (:path, :scheme, :authority, :method), and (3) whitespace rejection in header field-names. All fixes were authore..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-10705" }, "action_statement": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T02:28:07.577709+00:00", "status_notes": "Vulnerability CVE-2020-10719 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2020-10719 is not present in this target. The vulnerability involved unbounded chunk size parsing in HTTP chunked transfer encoding, allowing integer overflow that could enable request smuggling. The upstream Undertow project fixed this in commit bfc8fbd67 (Feb 2020) by adding a bounds check (LIMIT = Long.MAX_VALUE >> 4) before bit-shifting the chunk size accumulator. This fix was already p...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10719" }, "impact_statement": "not_affected \u2014 CVE-2020-10719 is not present in this target. The vulnerability involved unbounded chunk size parsing in HTTP chunked transfer encoding, allowing integer overflow that could enable request smuggling. The upstream Undertow project fixed this in commit bfc8fbd67 (Feb 2020) by adding a bounds check (LIMIT = Long.MAX_VALUE >> 4) before bit-shifting the chunk size accumulator. This fix was already p..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-1745" }, "action_statement": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-1757" }, "action_statement": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-27782" }, "action_statement": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T03:41:00.167575+00:00", "status_notes": "Vulnerability CVE-2021-20220 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2021-20220 is not present in Undertow 2.3.10.Final-tuxcare.8. The vulnerability involves HTTP request smuggling via invalid characters in HTTP request headers. The fix (commit cb6cdc4e0) adds strict character validation for HTTP/2 pseudo-headers (PATH, SCHEME, AUTHORITY, METHOD) and was already present in upstream release 2.3.10.Final (Oct 2023) before TuxCare onboarded it. Both HTTP/1.x an...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-20220" }, "impact_statement": "not_affected \u2014 CVE-2021-20220 is not present in Undertow 2.3.10.Final-tuxcare.8. The vulnerability involves HTTP request smuggling via invalid characters in HTTP request headers. The fix (commit cb6cdc4e0) adds strict character validation for HTTP/2 pseudo-headers (PATH, SCHEME, AUTHORITY, METHOD) and was already present in upstream release 2.3.10.Final (Oct 2023) before TuxCare onboarded it. Both HTTP/1.x an..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-31T23:36:00.286721+00:00", "status_notes": "Vulnerability CVE-2021-3597 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2021-3597 is not present in Undertow 2.3.10.Final-tuxcare.8. The vulnerability was fixed in the upstream release 2.3.10.Final (October 2023) via commit b92904715 authored by Flavia Rainone (Red Hat), well before TuxCare onboarded this version (December 2025). The fix ensures that the final HTTP/2 frame is properly requeued when there are remaining bytes in the header buffer, preventing the ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-3597" }, "impact_statement": "not_affected \u2014 CVE-2021-3597 is not present in Undertow 2.3.10.Final-tuxcare.8. The vulnerability was fixed in the upstream release 2.3.10.Final (October 2023) via commit b92904715 authored by Flavia Rainone (Red Hat), well before TuxCare onboarded this version (December 2025). The fix ensures that the final HTTP/2 frame is properly requeued when there are remaining bytes in the header buffer, preventing the ..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-11-01T00:07:00.112617+00:00", "status_notes": "Vulnerability CVE-2021-3629 does not affect version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples. not_affected \u2014 CVE-2021-3629 affects Undertow versions prior to 2.0.40.Final and 2.2.11.Final. The target version 2.3.10.Final-tuxcare.8 is not affected because the upstream fix (UNDERTOW-1910 and subsequent refinements) was already present in the upstream 2.3.10.Final release that TuxCare onboarded. The fix prevents indefinite thread blocking during HTTP/2 flow control exhaustion by adding bounded timeouts t...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-3629" }, "impact_statement": "not_affected \u2014 CVE-2021-3629 affects Undertow versions prior to 2.0.40.Final and 2.2.11.Final. The target version 2.3.10.Final-tuxcare.8 is not affected because the upstream fix (UNDERTOW-1910 and subsequent refinements) was already present in the upstream 2.3.10.Final release that TuxCare onboarded. The fix prevents indefinite thread blocking during HTTP/2 flow control exhaustion by adding bounded timeouts t..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2021-3690" }, "action_statement": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2021-3859" }, "action_statement": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2022-2053" }, "action_statement": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2022-4492" }, "action_statement": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-1108" }, "action_statement": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-1973 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-1973" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-4639 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-4639" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1459 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-1459" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1635 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-1635" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-3653 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-3653" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-27T19:16:25.121231+00:00", "status_notes": "Vulnerability CVE-2024-3884 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.8.", "vulnerability": { "name": "CVE-2024-3884" }, "action_statement": "Vulnerability CVE-2024-3884 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-4027 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.5.", "vulnerability": { "name": "CVE-2024-4027" }, "action_statement": "Vulnerability CVE-2024-4027 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.5." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-examples 2.3.10.Final-tuxcare.2.", "vulnerability": { "name": "CVE-2024-4109" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-5971 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-5971" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6162 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-6162" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-7885 is fixed in version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-7885" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-12543 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2025-12543" }, "action_statement": "Vulnerability CVE-2025-12543 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-9784 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.3.", "vulnerability": { "name": "CVE-2025-9784" }, "action_statement": "Vulnerability CVE-2025-9784 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.3.10.Final-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-3260 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.7.", "vulnerability": { "name": "CVE-2026-3260" }, "action_statement": "Vulnerability CVE-2026-3260 affects version 2.3.10.Final-tuxcare.2 of io.undertow:undertow-examples, and is fixed in 2.3.10.Final-tuxcare.7." } ] }