{"id":"CLSA-2025-1766534903","summary":"TuxCare security update for io.undertow (4 CVEs)","details":"TuxCare rebuilt 8 io.undertow packages to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.2.","modified":"2026-08-07T10:00:38.640284710Z","published":"2026-08-04T14:52:06Z","upstream":["CVE-2023-1973","CVE-2024-1459","CVE-2024-3653","CVE-2024-5971"],"affected":[{"package":{"name":"io.undertow:undertow-benchmarks","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-benchmarks"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-dist","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-dist"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-examples","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-examples"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-parser-generator","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-parser-generator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-servlet","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-servlet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}},{"package":{"name":"io.undertow:undertow-websockets-jsr","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.undertow/undertow-websockets-jsr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10.Final-tuxcare.2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2025-1766534903.json"}}],"schema_version":"1.8.0"}