undertow-parent vulnerabilities

CVEs whose affected-version data names the undertow-parent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19879Medium· 5.3

2mo ago

Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header value…

▾ SunlitRed Hat · undertow-coreEPSS 0.39%via CVEORG