TI-2026-22645 CVE-2026-28368 · GHSA-8v4x-mgvp-p658
Undertow: undertow: request smuggling via inconsistent header parsing
Priority MEDIUM 43
A flaw was found in Undertow.
RHSA-2026:25125
Red Hat JBoss Enterprise Application Platform 8.1.6 security update
Released 2026-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 8.1 for RHEL 8 eap8-activemq-artemis-2.40.0-7.redhat_00015.1.el8eap, eap8-activemq-artemis-cli-2.40.0-7.redhat_00015.1.el8eap, eap8-activemq-artemis-commons-2.40.0-7.redhat_00015.1.el8eap +19
- Red Hat JBoss EAP 8.1 for RHEL 9 eap8-activemq-artemis-2.40.0-7.redhat_00015.1.el9eap, eap8-activemq-artemis-cli-2.40.0-7.redhat_00015.1.el9eap, eap8-activemq-artemis-commons-2.40.0-7.redhat_00015.1.el9eap +19
Fixes 4 records
TI-2026-22646 CVE-2026-28369 · GHSA-vqqj-9cmv-hx43
Undertow: undertow: request smuggling via malformed http request headers
Priority MEDIUM 42
A flaw was found in Undertow.
TI-2026-22644 CVE-2026-28367 · GHSA-3gv6-g396-9v4r
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
Priority MEDIUM 42
A flaw was found in Undertow.
TI-2026-01291 CVE-2026-1605 · GHSA-xxh7-fcf3-rj7f
Uncontrolled resource consumption in Eclipse Jetty
Priority MEDIUM 40
In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compr…