https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:28:48.323125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un… 2026-10-02T19:28:48.376335+00:00 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/euvd-2026-20965 EUVD-2026-20965 2026-10-02T19:28:48.376389+00:00 EUVD-2026-20965 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3597 fkie_cve-2021-3597 2026-10-02T19:28:48.376404+00:00

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

 https://cve.radiocsirt.org/vuln/ghsa-mfhv-gwf8-4m88 GHSA-mfhv-gwf8-4m88 — undertow Race Condition vulnerability 2026-10-02T19:28:48.376434+00:00

Affected: Maven: io.undertow:undertow-core

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

 https://cve.radiocsirt.org/vuln/gsd-2021-3597 gsd-2021-3597 2026-10-02T19:28:48.376459+00:00 gsd-2021-3597 https://cve.radiocsirt.org/vuln/rhsa-2021:3466 RHSA-2021:3466 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.9 security update on RHEL 6 2026-10-02T19:28:48.376471+00:00

undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS wildfly-core: Invalid Sensitivity Classification of Vault Expression undertow: buffer leak on incoming websocket PONG message may lead to DoS jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3597 UBUNTU-CVE-2021-3597 2026-10-02T19:28:48.376498+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0916 WID-SEC-W-2022-0916 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-02T19:28:48.376524+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in der Red Hat JBoss Enterprise Application Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Zustand auszulösen und vertrauliche Informationen offenzulegen.