{ "@id": "urn:uuid:e51c44ed-77cf-4525-85ff-6fe8ded2b041", "role": "Document Creator", "author": "https://tuxcare.com", "version": 14, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-01T04:18:00.065830+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2014-7816 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2014-7816" }, "action_statement": "Vulnerability CVE-2014-7816 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2016-7046 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2016-7046" }, "action_statement": "Vulnerability CVE-2016-7046 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-12165 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-12165" }, "action_statement": "Vulnerability CVE-2017-12165 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T23:48:00.112913+00:00", "status_notes": "Vulnerability CVE-2017-12196 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2017-12196 is not present in Undertow 2.2.24.Final. The vulnerability (URI validation bypass in Digest authentication) was fixed by upstream commit facb33a5c on 2017-10-03, and this fix was already included in the upstream release 2.2.24.Final when TuxCare onboarded it. The target contains the complete URI validation logic that prevents the attack described in the CVE.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-12196" }, "impact_statement": "not_affected \u2014 CVE-2017-12196 is not present in Undertow 2.2.24.Final. The vulnerability (URI validation bypass in Digest authentication) was fixed by upstream commit facb33a5c on 2017-10-03, and this fix was already included in the upstream release 2.2.24.Final when TuxCare onboarded it. The target contains the complete URI validation logic that prevents the attack described in the CVE." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2666 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-2666" }, "action_statement": "Vulnerability CVE-2017-2666 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2017-2670 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-2670" }, "action_statement": "Vulnerability CVE-2017-2670 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:52:10.332998+00:00", "status_notes": "Vulnerability CVE-2017-7559 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2017-7559" }, "action_statement": "Vulnerability CVE-2017-7559 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-11-01T00:20:00.208792+00:00", "status_notes": "Vulnerability CVE-2018-1114 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 The target repository (Undertow 2.2.24.Final-tuxcare.1) is NOT vulnerable to CVE-2018-1114. The file descriptor leak vulnerability in URLResource.getLastModified() for JAR URLs was already fixed in the upstream release 2.2.24.Final that TuxCare onboarded. The fix commit (882d5884f) by Norito Agetsuma was part of the upstream release and properly handles JAR URLs by using File.lastModified() ins...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-1114" }, "impact_statement": "not_affected \u2014 The target repository (Undertow 2.2.24.Final-tuxcare.1) is NOT vulnerable to CVE-2018-1114. The file descriptor leak vulnerability in URLResource.getLastModified() for JAR URLs was already fixed in the upstream release 2.2.24.Final that TuxCare onboarded. The fix commit (882d5884f) by Norito Agetsuma was part of the upstream release and properly handles JAR URLs by using File.lastModified() ins..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-11-01T04:18:00.065830+00:00", "status_notes": "Vulnerability CVE-2018-14642 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2018-14642 is NOT present in this target. The fix (UNDERTOW-1412) was already included in upstream Undertow 2.2.24.Final before TuxCare onboarded it. The vulnerable pattern (writing data.length bytes from a reusable buffer potentially containing stale data) has been replaced with the correct implementation (writing only length+1 bytes of valid data). Fix commit a83b047d5 by Stuart Douglas (...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-14642" }, "impact_statement": "not_affected \u2014 CVE-2018-14642 is NOT present in this target. The fix (UNDERTOW-1412) was already included in upstream Undertow 2.2.24.Final before TuxCare onboarded it. The vulnerable pattern (writing data.length bytes from a reusable buffer potentially containing stale data) has been replaced with the correct implementation (writing only length+1 bytes of valid data). Fix commit a83b047d5 by Stuart Douglas (..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-10184 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-10184" }, "action_statement": "Vulnerability CVE-2019-10184 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-10212 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-10212" }, "action_statement": "Vulnerability CVE-2019-10212 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-14888 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-14888" }, "action_statement": "Vulnerability CVE-2019-14888 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2019-3888 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2019-3888" }, "action_statement": "Vulnerability CVE-2019-3888 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-11-01T03:30:18.456848+00:00", "status_notes": "Vulnerability CVE-2020-10687 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2020-10687 is not present in the target. The vulnerability allowed HTTP request smuggling via invalid characters in request components (method, path, scheme, authority, header names), enabling cache poisoning, XSS, and cross-user information disclosure. The upstream Undertow project fixed this with commit a18574a4da (HTTP/2 validation, May 2020) and 3436b03eda (HTTP/1.x validation, Aug 2017...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10687" }, "impact_statement": "not_affected \u2014 CVE-2020-10687 is not present in the target. The vulnerability allowed HTTP request smuggling via invalid characters in request components (method, path, scheme, authority, header names), enabling cache poisoning, XSS, and cross-user information disclosure. The upstream Undertow project fixed this with commit a18574a4da (HTTP/2 validation, May 2020) and 3436b03eda (HTTP/1.x validation, Aug 2017..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-10705 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-10705" }, "action_statement": "Vulnerability CVE-2020-10705 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-11-01T02:32:36.583439+00:00", "status_notes": "Vulnerability CVE-2020-10719 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2020-10719 is not present in this target. The vulnerability involves integer overflow when parsing HTTP chunked transfer encoding chunk sizes, which could enable request smuggling attacks. The upstream vendor (Red Hat/JBoss) fixed this in commit bfc8fbd67 by adding bounds validation before left-shift operations in ChunkReader.java. This fix was already included in the upstream 2.2.24.Final ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10719" }, "impact_statement": "not_affected \u2014 CVE-2020-10719 is not present in this target. The vulnerability involves integer overflow when parsing HTTP chunked transfer encoding chunk sizes, which could enable request smuggling attacks. The upstream vendor (Red Hat/JBoss) fixed this in commit bfc8fbd67 by adding bounds validation before left-shift operations in ChunkReader.java. This fix was already included in the upstream 2.2.24.Final ..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1745 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-1745" }, "action_statement": "Vulnerability CVE-2020-1745 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-1757 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-1757" }, "action_statement": "Vulnerability CVE-2020-1757 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2020-27782 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2020-27782" }, "action_statement": "Vulnerability CVE-2020-27782 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-20220 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2021-20220" }, "action_statement": "Vulnerability CVE-2021-20220 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T23:39:00.087158+00:00", "status_notes": "Vulnerability CVE-2021-3597 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2021-3597 affects Undertow versions prior to 2.2.9.Final due to failure to write the final HTTP/2 frame under certain circumstances. The target version 2.2.24.Final is NOT affected because the upstream fix (commit b92904715, UNDERTOW-1842) was already present in the upstream 2.2.24.Final release when TuxCare onboarded it. The fix ensures that when flushComplete() encounters remaining unflus...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-3597" }, "impact_statement": "not_affected \u2014 CVE-2021-3597 affects Undertow versions prior to 2.2.9.Final due to failure to write the final HTTP/2 frame under certain circumstances. The target version 2.2.24.Final is NOT affected because the upstream fix (commit b92904715, UNDERTOW-1842) was already present in the upstream 2.2.24.Final release when TuxCare onboarded it. The fix ensures that when flushComplete() encounters remaining unflus..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-11-01T00:10:00.106947+00:00", "status_notes": "Vulnerability CVE-2021-3629 does not affect version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples. not_affected \u2014 CVE-2021-3629 is not present in Undertow 2.2.24.Final. The vulnerability involves HTTP/2 flow control handling that could cause server threads to block indefinitely while waiting for WINDOW_UPDATE frames from the peer, leading to denial of service. The fix was introduced in upstream commit a4e7b1dbd (UNDERTOW-1910) by Flavia Rainone (frainone@redhat.com) and shipped in the upstream 2.2.24.Final...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-3629" }, "impact_statement": "not_affected \u2014 CVE-2021-3629 is not present in Undertow 2.2.24.Final. The vulnerability involves HTTP/2 flow control handling that could cause server threads to block indefinitely while waiting for WINDOW_UPDATE frames from the peer, leading to denial of service. The fix was introduced in upstream commit a4e7b1dbd (UNDERTOW-1910) by Flavia Rainone (frainone@redhat.com) and shipped in the upstream 2.2.24.Final..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3690 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2021-3690" }, "action_statement": "Vulnerability CVE-2021-3690 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2021-3859 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2021-3859" }, "action_statement": "Vulnerability CVE-2021-3859 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2022-2053 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2022-2053" }, "action_statement": "Vulnerability CVE-2022-2053 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2022-4492 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2022-4492" }, "action_statement": "Vulnerability CVE-2022-4492 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2023-1108 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-1108" }, "action_statement": "Vulnerability CVE-2023-1108 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-1973 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-1973" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-4639 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2023-4639" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1459 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-1459" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-1635 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-1635" }, "action_statement": "Vulnerability CVE-2024-1635 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-3653 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-3653" }, "action_statement": "Vulnerability CVE-2024-3653 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-3884 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-3884" }, "action_statement": "Vulnerability CVE-2024-3884 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-4027 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-4027" }, "action_statement": "Vulnerability CVE-2024-4027 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-examples 2.2.24.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2024-4109" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-5971 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-5971" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6162 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-6162" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-7885 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2024-7885" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-12543 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2025-12543" }, "action_statement": "Vulnerability CVE-2025-12543 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-9784 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2025-9784" }, "action_statement": "Vulnerability CVE-2025-9784 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.undertow/undertow-examples@2.2.24.Final-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-3260 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples.", "vulnerability": { "name": "CVE-2026-3260" }, "action_statement": "Vulnerability CVE-2026-3260 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-examples." } ] }