VulnSea

undertow-websockets-jsr vulnerabilities

CVEs whose affected-version data names the undertow-websockets-jsr package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19879Medium· 5.3
2mo ago

Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header value…

▾ SunlitRed Hat · undertow-coreEPSS 0.39%via CVEORG
undertow-websockets-jsr vulnerabilities (CVEs) · VulnSea