io.undertow/undertow-websockets-jsr vulnerabilities

CVEs whose affected-version data names the io.undertow/undertow-websockets-jsr package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15565High· 7.5

2mo ago

A flaw was found in Undertow

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack …

▾ TwilightRed Hat · io.undertow/undertow-websockets-jsrEPSS 1.2%via NVD